Ok so I am a contractor for a DoD facility and we will be CMMC L2. I maintain the entire IT infrastructure as if I was employeed as the IT Admin but I am a contractor, for personal reasons I do not wish to be W2 which they are fine with. I don’t use any personal equipment, I issue myself Intune managed equipment and I follow all of the policy and procedure that I have implemented per the NIST 800-171. I work no differently than as if I was employeed as the admin and issue myself physical access and network access accounts that are audited like everyone else and I am physically at the facility and do not access anything that is not by managed equipment. I am literally the one writing the policies.
Now my question and concern is per the new CMMC Rule would I be considered an MSP or can I maintain my status as a contractor and not have to conduct my own CMMC certification as an MSP?
( if I need to clarify anything better to help answer this question let me know )
[link] [comments]