Cotton & Company Becomes a CMMC Registered Provider Organization

ALEXANDRIA, Va.--(BUSINESS WIRE)--COTTON & COMPANY LLP announced today that they have achieved Registered Provider Organization (RPO) status, which allows the firm to deliver high-quality Cybersecurity Maturity Model Certification (CMMC) advisory support services to future clients. Achieving RPO status strengthens the firm’s position to help secure the federal supply chain.

The CMMC is designed to ensure all Department of Defense (DoD) contractors have sufficient security controls in place to protect federal classified information (FCI) and controlled unclassified information (CUI).

“We are excited to receive the RPO designation. It is also timely in light of recent security incidents that have affected the government and its supply chain. We believe we are well positioned to deliver valuable insights and compliance support services for any company looking to achieve CMMC certification,” said Gary Barton, Advisory Practice Lead Partner.”

Cotton & Company has also applied to become a Certified Third Party Assessor Organization (C3PAO).

About Cotton & Company

Cotton & Company LLP, a Washington Post 2020 Top Workplace, was founded in Alexandria in 1981, and has 16 partners and more than 180 employees. Our CPA firm provides specialized services for governmental agencies and programs, as well as commercial clients. At Cotton & Company, we support government accountability and assist our clients in ensuring that taxpayer money and data is properly handled. By validating and questioning our clients’ documentation, we help to establish that funds and systems are being used appropriately and purposefully. Our work requires equal amounts of precision and passion as we strive to contribute to an efficient government that is best able to serve its people. Visit Cotton & Company at www.cottoncpa.com or contact Steven Koons, Managing Partner, at 703.836.6701 or [e-mail].