Case Study: Gannett Fleming achieves CMMC compliance efficiency with Onspring

Gannett Fleming boosts CMMC compliance with Onspring as SPRS score rises from 22 to 46

Gannett Fleming, a civil engineering consulting firm with over 3,000 employees, needed to achieve CMMC certification for its Department of Defense contracts. The company's lean cybersecurity team struggled with manual processes, using dispersed Excel files and Word documents to manage the complex framework's controls and evidence collection. They turned to vendor Onspring and its GRC Suite for an automated solution to manage compliance and third-party risk.

Onspring provided a centralized platform to manage CMMC controls, identify exceptions, and automatically generate POA&Ms. The solution automated evidence collection from subject matter experts and dramatically improved the team's productivity. The measurable impact was a significant increase in their SPRS score, from 22 to 46, providing clear progress reports for leadership. Onspring also automated their third-party risk management process, saving considerable time and expediting procurement.

Gannett Fleming