The Challenge: New Security Rules for Government Construction
PJ Dick, Trumbull, and The Lindy Group build large projects across the Northeast. Their teams often work inside federal buildings and high-security sites. Because of this work, they need strong physical and digital safety measures. Recently, government contracts started including strict Department of Defense rules. Bids, presentations, and team reviews now require clear proof of cyber readiness. These rules include:
- DFARS 252.204-7012, 7019, and 7020 requirements
- NIST SP 800-171 security controls
- Official scores in the Supplier Performance Risk System (SPRS)
- CMMC 2.0 Level 2 rules for handling Controlled Unclassified Information (CUI)
We started seeing things trickle down from certain jobs involving DFARS. Suddenly it wasn't just 'tell us what you do,' it was 'prove it,' complete with SPRS scores and evidence.
The company decided to act fast. Getting ready before certification became mandatory was the best way to keep bidding on federal projects.
The companies wanted to continue pursuing government work. Compliance is a requirement for that. And honestly, it just makes sense for business and modernization overall.
Echelon's Simple 3-Step Plan for CMMC Readiness
Echelon thoroughly reviewed PJ Dick's modern IT systems. Cyber safety experts interviewed staff and checked existing controls across all 14 NIST security areas.
- Checking System Strengths: Echelon confirmed that existing IT tools and team habits were already strong.
- Setting Data Boundaries: The team marked exact zones for CUI data. This step kept the audit scope small and saved money.