Assessment Services
KNC provides a broad range of assessments

CMMC Level 2 Assessment - Authorized C3PAO
The CMMC Assessment program for Organizations Seeking Certification (OSC) is set to begin after the Title 32 CFR Part 170 final rule is effective on 12/16/24. KNC is one of the few West Coast based Authorized C3PAO's. We are actively scheduling assessments for 2025. If you would like to receive a firm fixed price proposal, please download our questionnaire, and email it to us at sales @ kncss.com.
Download Assessment Questionnaire 
CMMC Level 2 Mock Assessment - Authorized C3PAO
KNC offers an OSC the opportunity to conduct an optional mock assessment prior to commencing the official assessment. In the mock assessment, KNC will review the OSC documents and evidence, and walk the OSC through the actual assessment process. KNC can provide the OSC with a report of what controls and assessment objectives are considered not met. KNC cannot provide any advice on how to remediate any failed controls.

Vulnerability Assessment
What is Cyber RECON?
A proactive technical vulnerability threat assessment that empowers organizations by helping them understand their current Cybersecurity threats, validate Cybersecurity investments, and identify areas of improvement.
Cyber RECON is a service where we conduct an assessment with multiple tools from different perspectives to gather as much information as possible on your threats and vulnerabilities.
Cyber RECON is not a framework-based gap assessment or a questionnaire-based assessment.
Who is it for?
This was created primarily for small to medium organizations with 50 to 500 employees
Learn more

Penetration Testing
A penetration test, also
known as a pen test, is a simulated cyber-attack on a computer system,
network, or web application to test its defenses.
The goal of a penetration
test is to identify vulnerabilities in the system that an attacker could
exploit and to determine how well the system can withstand an attack.
Learn More

NIST 800-171 Gap Assessment
KNC understands exactly what is required to become compliant with NIST 800-171.
We will conduct a NIST SP 800-171 gap analysis of your readiness and help you determine if you are fully compliant, or what remaining steps you need to complete to be ready.
Benefits
- Verify your readiness prior to a CMMC assessment
- Demonstrate your readiness to your prime contractors and customers
- Receive an attestation letter from an Authorized C3PAO