The CMMC Kickstart for Higher Education is a specialized service designed to support institutions working with the U.S. Department of Defense (DoD) in achieving Cybersecurity Maturity Model Certification (CMMC) compliance. This service enables institutions to establish a new, compliant Google Workspace enterprise tenant while maintaining their existing .edu environment. The engagement includes expert-led setup, configuration, and training aligned to CMMC requirements and EDU best practices.
This service is ideal for institutions that need to meet CMMC compliance but are constrained by the limitations of EDU tenants, such as the inability to apply required advanced licenses or access extended support.
Deliverables
* Kickoff Call: A 60-minute session to gather requirements, confirm licensing, and establish access.
* Enterprise Tenant Setup: Guided configuration of a new Google Workspace enterprise tenant aligned to CMMC requirements.
* Security & Compliance Training: Two 60-minute review calls focused on security center, DLP, and compliance best practices.
* Documentation: Summary of setup, configuration, and recommendations for next steps.
* Support Handoff: Guidance on managing the new tenant and maintaining compliance posture.
Milestones
* Welcome Email: Includes intake form, SOE, and scheduling link for kickoff.
* Kickoff Call: Within 1 week of purchase.
* Tenant Setup & Configuration: Completed within 2–3 weeks of kickoff.
* Review Calls: Scheduled within 4–6 weeks of kickoff.
Engagement Completion: Within 60 days of final review call or 90 days from kickoff, whichever comes first.
Scope of Access
To perform this service, CDW Amplified for Education will require:
* Super Admin access to the new enterprise tenant.
* Direct authentication to Google (2SV enforced).
* Access to security settings, admin roles, billing, and reporting features.
What's Included
* Setup of a new enterprise tenant for CMMC compliance.
* Configuration of core security and compliance settings.
* Two review/training calls on security and compliance tools.
* Documentation of setup and recommendations.
What's Not Included
* Migration of users or data from .edu to enterprise tenant.
* Device management or endpoint configuration.
* Guarantee of CMMC audit success.
* Ongoing support beyond the review calls (available separately).
Customer Responsibilities
* Provide timely access and complete intake form.
* Assign a primary point of contact for coordination.
* Attend all scheduled calls and review documentation.
* Implement recommendations as needed.
Timeline
* Total Duration:
6 weeks from kickoff to completion.
* Review Call Deadline: Must be completed within 60 days of document delivery.
* Document Retention: All documentation will be retained for 6 months post-engagement.
Completion Criteria
* The engagement is considered complete when:
* All deliverables have been provided.
* The review call has been completed or 60 days have passed since document delivery.
Disclosure
No Guarantee of Certification or Audit Success: CDW does not guarantee, warrant, or represent that the Services, or Client's Google Workspace environment configured by CDW, will achieve any specific CMMC certification level, pass any CMMC assessment, audit, or review conducted by a Certified Third-Party Assessor Organization (C3PAO) or any other third party, or satisfy all requirements for CMMC compliance. CMMC compliance is an ongoing process that requires continuous effort, monitoring, and adherence to various controls and practices by the Client.
