Construction firm maps how work really flows and finds CMMC Level 1 comes down to five habits
A regional commercial construction firm subcontracting to defense primes.
The problem
A regional commercial construction firm working under defense prime contractors knew the 15 CMMC Level 1 safeguards and had policies drafted. What nobody could say was where federal contract information actually entered, moved and rested in daily work. That knowledge lived in the heads of estimators, project engineers and field staff, spread across portals, email, paper drawings and jobsite photos.
Why it mattered
Without that picture, controls could not be tied to real workflows, audit evidence did not exist, and any change risked slowing bids and jobsite operations.
What we did
Instead of audit-style interviews, Vizius ran four days of whiteboard sessions pairing the person who does the work, the leader accountable for it and IT. The team mapped twelve core processes as actually performed, overlaid where regulated information touches each step, and only then read the safeguards against that reality.
What changed
Draft deliverables map twelve processes and reduce 37 recommendations to five working habits that need no new tools, because every flow already has a controlled system of record. Final deliverables have not yet been issued.
- Construction and engineering
- Midsize company
- CMMC
- FAR 52.204-21