Structural Engineering and Federal Contracting case study
Protecting Federal Contract Information at WCD & Associates Without Overengineering the Business
WCD & Associates needed to protect Federal Contract Information for a limited group of users without imposing the same complexity on every file, employee, and system. Level 4 helped define the protected scope and surround it with practical identity, access, security, and documentation controls.
- CMMC Level 1
- FCI
- Identity
- Managed Cybersecurity
WCD & Associates
Structural Engineering and Federal Contracting
Executive summary
A practical operating model—not a collection of disconnected tools
WCD & Associates needed to protect Federal Contract Information for a limited group of users without imposing the same complexity on every file, employee, and system. Level 4 helped define the protected scope and surround it with practical identity, access, security, and documentation controls.
The challenge
What the organization needed to solve
- Identify where Federal Contract Information is stored and who needs it.
- Limit the protected-data scope to avoid unnecessary operational complexity.
- Centralize identity and access for approximately 11 active users.
- Document safeguards and responsibilities without implying third-party certification.
Level 4’s approach
How the work was connected
- Defined a controlled repository using a secured server share or Microsoft SharePoint/OneDrive architecture as appropriate.
- Used Active Directory, a hosted domain controller, groups, permissions, Group Policy, and firewall-protected connectivity to centralize access.
- Added endpoint protection, MDR, MFA, identity security, awareness training, vulnerability management, email security, backup, and monitoring.
- Supported documentation and readiness work for CMMC Level 1 self-assessment requirements.
The outcome
A more accountable and supportable environment
Related services
Explore the capabilities behind this engagement
Apply the lessons to your environment
Review Your CMMC Environment
Start with a focused conversation about your current systems, operating risks, internal resources, and desired outcomes.