Viderity

Viderity needed to achieve CMMC Level 2 compliance to support Department of Defense (DoD) contracts while ensuring proper handling of Controlled Unclassified Information (CUI). The organization faced several challenges:

No secure, compliant environment for handling CUI
Fragmented systems for email, file sharing, and data protection
Lack of centralized control mapping aligned with NIST SP 800-171
Manual and inconsistent evidence collection processes
Limited visibility into compliance posture and audit readiness

They required a solution that could quickly establish a compliant enclave without disrupting existing business operations.

A hybrid compliance architecture was implemented using PreVeil and Microsoft GCC to create a secure and scalable CMMC Level 2 environment.

Key components included:

CUI Enclave with PreVeil
Secure email and file sharing environment enabling end-to-end encryption for CUI without overhauling existing infrastructure
Microsoft GCC Secure Configuration
Hardened Microsoft 365 GCC environment with compliance-focused configurations including identity protection, access controls, and audit logging
Control Mapping & Implementation
Alignment of all 110 practices from NIST SP 800-171 across both platforms
Automated Evidence Collection
Integration of workflows to capture logs, screenshots, and system configurations as audit evidence
Policy & Procedure Development
Creation of CMMC-aligned policies tailored to PreVeil and GCC usage
Continuous Monitoring & Compliance Tracking
Real-time dashboards for tracking control status, ownership, and remediation
Gap Assessment & POA&M Management
Identification and structured remediation of compliance gaps

This approach allowed Viderity to isolate and protect CUI while maintaining operational flexibility.

The implementation delivered strong, measurable outcomes:

Achieved CMMC Level 2 audit readiness
Established a secure, compliant CUI enclave using PreVeil
Strengthened identity, access, and monitoring capabilities within Microsoft GCC
Reduced compliance management effort by over 50%
Accelerated audit preparation through automated evidence collection
Improved visibility and accountability across all security controls
Enabled scalable compliance for future regulatory requirements

Viderity now operates with a secure and audit-ready environment, fully aligned with DoD expectations for handling sensitive information.