I’ve been tasked with establishing a government contracting position at my job as there is a local Ammunition Plant that reached out advising they have a need for local manufacturers for multiple projects who need to be CMMC Level 2 compliant. We only have 15 employees and I would be the only person allowed access to send/receive CUI from only my computer in my locked office. From what I’m reading, it seems like an enclave may be a better option for us instead of a full implementation of NIST 800-171 through our 3rd party IT Provider (who has no experience in implementing NIST). Am I on the right track? If anyone is willing to guide me a bit I’d be forever grateful!