So… our company is starting on this journey to be CMMC level 2 compliant. A consultant has upper management convinced that using Preveil is the best option with standalone, hardened laptops to get compliant.

Preveil, from my understanding gets some compliance boxes checked for encrypting CUI, but I don’t see how a standalone laptop can meet the controls while using Preveil. The laptop is at minimum a CRMA, and that must satisfy from an auditors perspective certain cybersecurity elements.

Am I off my rocker in thinking a standalone laptop that can connect only through public Wi-Fi, using Preveil meet compliance?

I did ask for proof, but that just went in circles.