The following software programs provide a real life example of how the software stack deployed by a CMMC compliance company.  Note that this company has passed Level 2 compliance for both their MSSP and MSP divisions as well as helping one of my clients pass a Level 2 compliance as well.

The challenge with advanced platforms like NinjaOne Purview, Sentinel, SentinelOne, and CrowdStrike isn’t access to the software—it’s the architectural design, tuning, operationalization, and ongoing governance required to make them effective.  For example, for NinjaRMM there are about a dozen features  blog post) which need to be configured correctly.  Note that for the FedRamp version of NinjaRMM (necessary for Level 2 compliant environments) this software which requires an annual $15,000 fee on top of the basic fees.

Security Solutions

CrowdStrike Suite

• Falcon Device Control: This tool ensures that only authorized USB devices can connect to endpoints, preventing data exfiltration and unauthorized access.
• Falcon Discover: Falcon Discover provides comprehensive visibility of your IT assets, allowing for real-time inventory tracking and identifying unmanaged devices.
• Falcon Insight: A next-gen endpoint detection and response (EDR) solution that delivers continuous monitoring and advanced threat detection capabilities.
• Falcon Overwatch: A proactive threat hunting service that leverages CrowdStrike’s intelligence to identify and mitigate sophisticated threats in your environment.
• Falcon Protect: An advanced anti-virus solution that combines traditional signature-based detection with machine learning to protect against known and unknown threats.
• Falcon Spotlight: A tool that scans for vulnerabilities across your network and provides management capabilities to prioritize and remediate them efficiently.

Microsoft Suite

• Entra ID: Offers a unified identity management system for users, security groups, roles, and access control to streamline authentication processes.
• Purview: Provides sensitivity labels and markings for Controlled Unclassified Information (CUI), helping organizations maintain compliance and data governance.
• Sentinel: A cloud-native SIEM solution that provides intelligent security analytics and threat intelligence across the enterprise.
• Intune: Enforces policy, configuration settings, device restrictions, and software requirements on managed devices to ensure compliance and security.
• BitLocker: Provides robust encryption for drives and files, ensuring data protection and compliance with regulatory standards.
• Defender for Cloud Apps: Protects the Microsoft application suite by offering advanced security controls and monitoring for cloud applications.
• Defender Firewall: A software-based firewall solution designed to protect Windows endpoints from unauthorized access and threats.
• Privileged Identity Management (PIM): Offers just-in-time control over privileged access and escalations, reducing the risk of unauthorized access.
• Azure Virtual Desktop (AVD): Provides secure virtualized desktops hosted in the datacenter, enabling remote work capabilities with enhanced security.

Zscaler Suite

• Internet Access: Includes content filtering, TLS inspection, DNS, IPS, and traffic isolation to secure internet access for endpoints.
• Private Access: A zero-trust network access solution that secures access to private applications without the need for VPNs.

Other Solutions

• Airlock: Enforces a software whitelist to ensure only approved applications can run on endpoints.
• AvePoint: Provides a secure backup solution for Office 365, compliant with FedRAMP standards.
• PatchMyPC: Simplifies third-party patch management by integrating with Microsoft Intune, ensuring systems are up-to-date and secure.
• KnowBe4: Offers a comprehensive learning and training platform to enhance cybersecurity awareness among employees.
• BeyondTrust: Provides secure session-based remote control and assistance capabilities for IT support and troubleshooting.
• NinjaRMM FedRamp Version: See here for a list of functionality and note a 15K annual fee on top of the low cost basic fees when deployed in a Level 2 environment.
• FutureFeed: Hosts governance, risk, and compliance efforts and tracking for Cybersecurity Maturity Model Certification (CMMC).