The CMMC Information Institute has created a set of standardized, fictitious companies that can be used when authoring cybersecurity-related training materials. Over time, we will be building out artifacts, including employee lists, organization charts, network diagrams, and other information for each of these organizations. Organizations, including schools, training providers, curriculum developers, and others are welcome to use these names and personas as part of their training programs under the Creative Commons CC BY license (i.e., we ask that you provide some attribution in exchange for their use). If you would like to contribute artifacts for any of these companies, please contact us.
These personas are intended to represent different small and medium businesses, specifically US government contractors, as well as companies that provide services to them. Those personas are:
Government Contractors
| Role | Company | Industry | CMMC 2.0 Level | URL |
|---|---|---|---|---|
| Government Contractor | Mavis’s Machine Shop | Contract manufacturing organization | 2 | https://MavisMachine.com |
| Government Contractor | Chinda’s Chickens | Food and fertilizer production | 1 | https://ChindasChickens.com |
| Government Contractor | GreatBigPrime | Large prime contractor | 2 | https://GreatBigPrime.com |
| Government Contractor | Henry’s Healthcare | Healthcare provider | 2 | https://HenrysHealthcare.com |
| Government Contractor | Better Health 4 You | Healthcare product manufacturer | 2 | https://BetterHealth4You.com |
| Government Contractor | TongaTek | Software developer and IT services company | 2 | https://TongaTek.com |
Service Providers
| Role | Company | Industry | FedRAMP or Equivalent | URL |
|---|---|---|---|---|
| Service Provider | Klowdize | Large cloud service provider (IaaS, PaaS, SaaS) | FedRAMP High | https://Klowdize.com |
| Service Provider | UCanShareIt | Cloud service focused on secure backups, file sharing | FedRAMP Equivalency letter from reputable 3PAO | https://UCanShareIt.com |
| Service Provider | Absolutely Perfect Cybersecurity | Managed security services provider | SOC 2 Type II | https://AbsolutelyPerfectCyber.com |
| Service Provider | Perpetual Uptime | Managed IT services provider | No certifications | https://PerpetualUptime.net |
| Service Provider | Brown Incident | Incident response and forensics | ISO 27001 | https://BrownIncident.com |
| Service Provider | Cover Your Org | Crisis management and PR firm | No certifications | https://CoverYourOrg.com |
| Service Provider | Lowe Price | IT consulting company | No certifications | https://LowePrice.com |
| Service Provider | Giant Reseller | Commercial Item Reseller | No certifications | https://GiantReseller.com |
The domain names listed above are all owned and controlled by the CMMC Information Institute. We will be building out websites to match their personas as time permits. There are no MX records associated with any of the domains, and that is intentional. We have no intention of creating actual E-mail accounts in any of the domains.