Start here
Scope map
We visit your shop and map where controlled information comes in, where it goes, and where it’s kept.
- Price
- $2,000 to $3,500. A fixed fee, agreed before we start. No hourly billing.
CMMC Level 2 documentation for machine shops in Ventura and north LA County
The audit paused. The obligation didn’t.
We write the paperwork behind your Cybersecurity Maturity Model Certification (CMMC) Level 2 self-assessment: your System Security Plan and the documents that go with it.
We work with machine shops and precision manufacturers in Ventura County and north Los Angeles County, and we come to your shop.
Third-party CMMC certification is paused. The self-assessment you sign still applies. See what’s still required.
Who we work with
Is this for your shop?
It’s for you if:
- You make parts for defense primes, or for companies that supply them.
- A prime has sent you a supplier questionnaire, a contract clause to follow, or a question about your Supplier Performance Risk System (SPRS) score.
- Nobody at your shop does compliance full time.
- You want the paperwork written for you, not a course on the rules.
It’s probably not for you if:
- You need computers or networks set up. That’s your IT provider’s work.
- You need an audit or a certification. We don’t do either.
- You need a legal opinion on a contract.
- You only handle Federal Contract Information (FCI), not CUI. Our work is built around Level 2.
Not sure? Finding out is what the first call is for.
Services and prices
What we do
We offer two engagements. Both are paperwork. We write the documents; your IT provider does the technical work.
Then, if it makes sense
Full write-up
The documents your self-assessment rests on, written from what we found at your shop.
See sample pages from a made-up shop
- Price
- $7,500 to $15,000. A fixed quote after the scope map, based on what we found. No hourly billing.
The process
How it works
Six steps, in order. You can stop after step 3.
Step 1
You call or email Josh. He asks a few quick questions, then books a free 15-minute call with Juan to see if we’re a fit. If we’re not, we’ll say so.
Step 2
Scope map: we visit your shop. We start at the desk, then walk the floor with a checklist.
Step 3
You get the written scoping document. You decide whether to go further.
Step 4
Full write-up: we write your documents. A second person checks each one before you get it.
Step 5
We walk you through the binder.
Step 6
You post your own score in SPRS, on your own computer.
The team
Who we are
Nexxus Advisory is run by two people in Ventura County, California.
Juan Morales
Founder and Technical Director
Leads the technical work. Every technical question comes to him, including whether a rule applies to your shop. This isn’t the first business Juan has started.
Joshua Recta
Head of Client Development
Runs outreach and follow-up. If we called you, it was probably Josh. Josh studied engineering.
Contact
Talk to us
Call or email Josh. He’ll book a free 15-minute call with Juan, who answers the technical questions.
Call
(805) 253-2061We don’t record calls.
Please don’t send drawings, contracts, or controlled information by email or through this site.