What is a Joint Surveillance Voluntary Assessment?
As an authorized CMMC Third Party Assessment Organization (C3PAO), MNS Group is approved to submit Defense Industrial Base (DIB) companies for a Joint Surveillance Voluntary Assessment (JSVA.) This type of assessment includes an evaluation by a DIBCAC team and a C3PAO, like MNS Group, to assess the OSC's systems to ensure they have implemented the security controls of NIST SP 800-171 as required by DFARS 7012.
A JSVA is conducted in a similar way to a CMMC Assessment and follows the same basic phases.
During a JSVA, the MNS Group assessment team, in coordination with DIBCAC's assessment team, will evaluate your NIST SP 800-171 practices. At the conclusion of the JSVA, your organization will be recognized as having successfully completed the DIBCAC High Confidence Assessment by receiving a score from DIBCAC directly in SPRS. Once the CMMC rule is finalized, it is the intent of the DoD to convert the JSVA results to a CMMC Maturity Level 2 Certification.
Is my organization eligible for a JSVA?
A company with a JSVA completed has fewer competitors for contracts, while those companies who waited are not eligible to bid until they receive a CMMC Assessment and rush to get assessed.
Why get a JSVA?
Numbers in your favor
Contracting Officers factor in Supplier Performance Risk Scores (SPRS) when evaluating quotations or offers. If your SPRS score is high, you have an advantage over companies with low SPRS scores and have only started compliance implementation.
Improved security
NIST SP 800-171 security requirements are designed to protect sensitive information. A JSVA will identify any weaknesses in systems or processes, giving you the chance to remediate and reduce the risk of cyberattacks and incidents.
Time and $ savings
Companies are required to re-certify every 3 years after their initial certification. By completing a JSVA now, time is extended between certification activities, allowing companies to distribute their financial and time investment over a longer period, minimizing disruption and expense. A successful JSVA will convert to a CMMC Maturity Level 2 certification, effective the date the final rule drops. Companies that certify now will have the advantage of more time to re-certify and budget toward the next assessment. It makes financial sense to act now.
How much does a JSVA cost?
Assessment costs are based on complexity and number of locations. Costs start at $53,500.