Nelson Engineering Finds Cost-Effective Path to CMMC Compliance with Arizona MEP
Nelson Engineering, an Arizona-based aerospace manufacturer, works with customers that require strict protection of federal Controlled Unclassified Information (CUI). The U.S. Department of Defense (DoD) now includes Cybersecurity Maturity Model Certification (CMMC) compliance in contracts which details the requirements for CUI protection. To remain competitive and meet customer requirements Nelson Engineering needed to achieve CMMC Level 2 compliance aligned with NIST SP 800-171.
The Challenge
Like many small manufacturers, Nelson Engineering faced CMMC compliance with limited internal resources. Between building in-house expertise, balancing staff time, managing budgets, and handling the extensive documentation requirements, the process quickly became challenging. Nelson Engineering turned to Arizona Manufacturing Extension Partnership (Arizona MEP) for help. From the first conversation, Arizona MEP focused on making the CMMC process understandable, achievable and cost-effective for a small business.
Arizona MEP's Role
Arizona MEP provided a well-defined, fixed-price engagement and outlined a structured roadmap for compliance. The project began with a comprehensive CMMC/NIST SP 800-171 gap assessment, resulting in a clearly organized System Security Plan (SSP) and a draft Plan of Action & Milestones (POA&M). Rather than overwhelming the team, Arizona MEP broke the process into manageable steps.
Weekly working sessions were established to review the SSP, assign actionable tasks, and track progress. Each meeting closed completed items and identified the next priorities, ensuring steady forward momentum. When questions arose between meetings, Arizona MEP remained readily available to provide clarification and guidance, keeping the project on schedule.
Results and Impact
Through the engagement, Nelson Engineering's team developed a strong understanding of CUI protection, required security controls, and how to implement policies and procedures that fit its business without adding unnecessary complexity. Customers were informed of the company's proactive compliance efforts, reinforcing trust and demonstrating a strong commitment to cybersecurity. CMMC compliance helped Nelson Engineering retain $2 million in sales and six jobs. The project also strengthened external relationships. Nelson Engineering evaluated its service providers' CMMC readiness and confidently referred partners to Arizona MEP when gaps were identified.
A Trusted Partner for Compliance
For Nelson Engineering, the value of working with Arizona MEP went beyond technical expertise. Arizona MEP understood both the aerospace industry and the realities of operating as a small manufacturer. Transparent pricing, clear expectations, and a practical implementation strategy made planning and execution far more predictable.
Arizona MEP took the time to understand how we operate and guided us through every step,
said Pepsi Rodarte, Compliance & FAA Accountable Manager. They provided a clear, well-structured path to CMMC compliance and built a partnership we trust.