Quzara LLC is a Registered Provider Organization (RPO) Designated by the CMMC- AB to perform consulting services. Quzara has expertise in cloud security, cyber operations, and risk assessments. They are an authorized vendor for the United States Government and a Microsoft Partner. Quzara services assist organizations to quickly understand cyber and business risk as they navigate the CMMC and NIST SP 800-171 compliance journey. Quzara's rapid assessment technology allows analysts to make smart decisions about boundaries related to customer data and how effectively they can remediate gaps.  

See below a curated list of custom services to meet the objectives of customers:

• Vulnerability Assessment and Reporting on Key Security Issues - $10,000. This report will enable organizations to understand deficiencies associated with their assets running in Azure and also provide remediation guidance with priority. This is a key aspect of meeting compliance for controls related to risk management. Limited to 100 Assets.
• M365 Security Assessment and Recommendations - $8,500. This single-tenant assessment focuses on security best practices related to the securing of email, file sharing, phishing, and URL Click protections that are available under the right licensing agreement for Microsoft 365 customers. The outcome of the assessment, customers will have a set of recommendations on how to best proceed on hardening their tenant.
• Azure Security Assessment - $12,500. This single subscription assessment allows us to evaluate the security posture of the current Azure environment and the utilization of native services that are part of the Microsoft Defender stack. The report is focused on tactical recommendations for remediation and includes priority guidance. Customers will use the outcome of the report not only to improve their security posture but to also use the recommendations as a hardening artifact that can meet the security control requirements. 
• Microsoft Sentinel Configuration and Set-up - $18,500. CMMC and NIST SP 800-171 both have security monitoring requirements that are related to the collection of audit log sources, audit log correlation, and incident response. We configure Microsoft Sentinel in a unique workspace dedicated to monitoring and configuring the data connectors that are native and non-native. Only those data connectors that are supported with Azure Sentinel will be used. Any custom data connectors will be billed additionally. We will deploy custom rules and playbooks for security orchestration and automation. We will configure alerting to internal security operations staff or customers can choose monitoring through our Security Operations Monitoring Center, known as Quzara Cybertorch™. This project is about 2 weeks long and requires staff members to install agents and configure subscriptions.