Helping Form Technologies Prepare for CMMC
Find out how AKRUP helped Form Technologies understand its current CMMC readiness through a detailed gap analysis, identifying areas for improvement and providing a clear path towards CMMC compliance.
Project Overview
Form Technologies engaged AKRUP to carry out a CMMC gap analysis and assess how its existing information security controls compared against CMMC requirements.
AKRUP worked closely with the Form Technologies team to understand the systems, processes and security controls already in place and identify where additional work would be required.
The assessment reviewed the organisation's current position against the relevant CMMC requirements, looking at both the implementation of security controls and the supporting policies, procedures and evidence.
Following the assessment, AKRUP provided Form Technologies with a clear understanding of its current CMMC readiness, the gaps that needed to be addressed and the actions required to move towards compliance.
Engagement: 2025
Industry: Manufacturing
Framework: CMMC
Outcome: Clear understanding of current CMMC readiness, identified gaps and a structured roadmap for remediation.
The Challenge
CMMC introduces a detailed set of cybersecurity requirements for organisations handling Controlled Unclassified Information (CUI) within the U.S. defence supply chain.
For organisations starting their CMMC journey, one of the first challenges is understanding how much of the required security framework is already in place and where improvements are needed.
Form Technologies needed a clear picture of its current position before moving forward with its wider CMMC compliance programme.
The organisation already had a range of security controls and processes in place, but needed to understand how these aligned with CMMC requirements and identify any areas that would need to be addressed before a future assessment.
AKRUP was brought in to provide an independent review and turn the CMMC requirements into a clear and manageable set of actions.
Our Approach
We started by working with the Form Technologies team to understand how CUI was accessed, managed and protected across the organisation.
Rather than simply working through a checklist, we looked at how each CMMC requirement was being addressed in practice and reviewed the policies, procedures, technical controls and supporting evidence available.
Where requirements were already being met, we identified the existing controls and evidence that could support CMMC compliance.
Where gaps were identified, we explained what was missing, why it was required and what Form Technologies would need to do to address it.
The findings were then brought together into a structured gap analysis, giving the team a clear view of their current position and helping them prioritise the next stages of their CMMC programme.
What We Delivered
CMMC Gap Analysis
Carried out a detailed assessment of the organisation's existing security arrangements against the applicable CMMC requirements.
CUI Review
Worked with the team to understand where Controlled Unclassified Information was accessed, processed and stored and how it was currently being protecte
Security Control Review
Reviewed existing technical and organisational security controls to understand which CMMC requirements were already being met and where improvements were needed.
Policies & Procedures
Reviewed existing information security policies and procedures to identify where documentation already supported CMMC and where additional documentation was required.
Evidence Review
Reviewed available evidence to understand whether implemented controls could be demonstrated effectively during a future CMMC assessment.
Gap Identification
Identified requirements that were not yet fully implemented and clearly documented what needed to be addressed.
Remediation Actions
Provided practical recommendations for each identified gap so the Form Technologies team could understand what needed to be implemented or improved.
Prioritisation
Helped organise the findings into a structured set of actions, allowing the team to focus on the most important areas first.
CMMC Readiness
Provided Form Technologies with a much clearer understanding of its current readiness and the work required before progressing towards a future CMMC assessment.
Project Outcome
The gap analysis gave Form Technologies a clear understanding of where it currently stood against CMMC requirements and, importantly, what needed to happen next.
Rather than approaching CMMC without knowing the scale of the work involved, the organisation now had a structured view of the controls already in place, the areas that required improvement and the actions needed to close those gaps.
Through the engagement, Form Technologies gained:
-
A clear understanding of its current CMMC readiness
-
Identification of gaps against CMMC requirements
-
Better visibility of how CUI was being managed and protected
-
An understanding of which existing security controls could support compliance
-
Identification of missing or incomplete policies and procedures
-
Clear remediation actions for identified gaps
-
A structured approach to prioritising CMMC improvements
-
A practical starting point for the next stage of its CMMC programme
The project gave Form Technologies a clear foundation for moving forward with CMMC, turning what can initially seem like a complex set of requirements into a manageable programme of work.
For AKRUP, the engagement demonstrates the value of carrying out a detailed gap analysis at the beginning of a CMMC project. Understanding the current position first allows organisations to focus their time and resources on the areas that actually need improvement.
Why AKRUP?
AKRUP has built a proven track record of helping organisations achieve successful compliance outcomes across recognised security and assurance standards. With experience supporting clients worldwide, we understand what it takes to move from uncertainty to audit-ready confidence.
Our 100% project success rate reflects the quality of our delivery, the strength of our expertise and our commitment to getting results right the first time. Businesses choose AKRUP because we provide clear direction, practical guidance and reliable support that helps turn compliance into a competitive advantage.
What our clients say
Trusted by organisations across automotive, manufacturing and technology sectors.
"Very happy with the service recieved and the ongoing support"
Denzil Allen, Head of HSEQT
Rudolph and Hellmann
Speak With Our Experts
Discuss your CMMC requirements with one of our specialists. Complete the form below and we'll help you plan your route to successful CMMC implementation.
Looking to achieve CMMC? Complete the form and one of our consultants will contact you to discuss your requirements and next steps.