If you’re pursuing DoD work and CMMC is a requirement, you need two things: clear scope and defensible evidence. Tegula is built for small teams who want a cost-controlled path forward.
Designed for smaller companies
Organizations handling FCI or CUI (or both)
Teams that need real guidance and not just generic templates
What you get
We deliver the core artifacts and guidance needed for CMMC readiness.
CMMC Gap Assessment Report
System Security Plan (SSP)
POA&M
Policy and Procedure Set
Risk Register
Evidence Mapping Checklist
Executive Readiness Brief
Advisory + implementation guidance
We don’t just hand you templates. We help you align real practices to CMMC requirements and close gaps in practical ways.
Tailored policies that match how you operate
Tool recommendations and configuration guidance (e.g., EDR)
Review of controls like firewall rules with clear recommendations
Evidence validation so documentation matches reality
Services and pricing
CMMC Level 1 (FCI)
$3,500 fixed fee • typical 2–3 weeks
Gap assessment, required policies, implementation guidance, and evidence prep.
CMMC Level 2 Advisory (Core)
$8,000 fixed fee • typical 4–6 weeks
Gap assessment, required policies, implementation guidance, and evidence prep.
CMMC Level 2 Advisory + Implementation Guidance
$12,000 fixed fee • typical 8–10 weeks
SSP, POA&M, policy set, risk register, evidence mapping, and validation.
Hourly Advisory (out-of-scope): $175/hr
Ongoing Compliance Support: $750/month
Download the CMMC Readiness Checklist
We don’t just hand you templates. We help you align real practices to CMMC requirements and close gaps in practical ways.
Get a practical checklist built for smaller defense subcontractors. It will help you spot the gaps that slow down CMMC Level 1/2 readiness—especially scope, documentation, and evidence.
No spam. No tool sales. Unsubscribe anytime.
Book a 20-minute CMMC triage call
On this call, we’ll confirm some foundational details (like a high level understanding of scope and your current readiness). We’ll work together to find a realistic, pragmatic path towards CMMC compliance.
We don’t sell tools, provide MSP/SOC services, or perform audits. We help you get ready,
FAQ
Do you guarantee certification?
No. No credible consultant can. We prepare you with defensible documentation and evidence.
Can we do this ourselves?
Yes. Most teams struggle with scope and evidence. That’s where we help.
Do you work with our MSP?
Yes. We provide the compliance layer; your MSP can implement remediation.
How fast can we get started?
Typically within 1–2 weeks, depending on availability and responsiveness.