R&M CONSULTANTS, INC. (R&M) has achieved Level 2 certification under the Department of Defense’s Cybersecurity Maturity Model Certification (CMMC). This certification strengthens R&M’s ability to continue supporting federal clients and reflects the firm’s commitment to safeguarding sensitive project information.
Working with Anchorage-based IT consultant Stratus Services, R&M completed the rigorous process required for Level 2 certification, which includes enhanced security requirements for handling Controlled Unclassified Information (CUI). Stratus, a CMMC Registered Provider Organization, helped ensure R&M met all requirements to protect Federal Contract Information (FCI).
“Cybersecurity is essential to the work we do, especially when supporting federal clients,” said Jere Fisher, R&M’s Group Manager of IT. “With Stratus’ expertise, we were able to implement the required controls and confirm that we’re doing the right things to keep our data secure.”
CMMC Level 2 includes 110 controls based on NIST Special Publication 800-171 Revision 2, a federal standard that outlines how organizations must protect sensitive government information known as CUI. These requirements cover everything from access controls and secure data storage to incident response and system monitoring.
“R&M’s dedication to doing this thoroughly and proactively sets them apart from the competition. With the completion of this certificate, they're one of the first ~500 companies to achieve Level 2 compliance out of the 119,000 the DoD estimates will need it,” said Joshua Rabe, CEO of Stratus Services. “They’ve set a strong foundation not only for CMMC compliance, but for a long-term security posture that supports their work across Alaska.”
The certification positions R&M to continue delivering high-quality infrastructure solutions for clients such as the U.S. Army Corps of Engineers and other federal agencies under the purview of the Department of Defense, while ensuring their systems, data and client information remain secure.
Founded in Alaska in 1969, R&M offers civil and geotechnical engineering; surveying and mapping; GIS services; geology; hydrology; environmental services; transportation and land use planning; public involvement; land development; right of way and lands consulting services; construction administration; materials testing; and special inspection. R&M has offices in Anchorage, Fairbanks and Juneau.
Stratus Services provides managed IT, cybersecurity and compliance solutions. Based in Anchorage, they support organizations across Alaska and the Pacific Northwest with technical expertise and a focus on practical implementation. An Cyber-AB certified RPO since 2022, Stratus’ team includes multiple CMMC-trained staff, including certified Registered Practitioners Advanced (RPAs) and even a Certified CMMC Assessor (CCA).
Learn more at www.rmconsult.com and www.stratus-services.com.
