The CMMC Information Institute has created a set of standardized, fictitious companies that can be used when authoring cybersecurity-related training materials. Over time, we will be building out artifacts, including employee lists, organization charts, network diagrams, and other information for each of these organizations. Organizations, including schools, training providers, curriculum developers, and others are welcome to use these names and personas as part of their training programs under the Creative Commons CC BY license (i.e., we ask that you provide some attribution in exchange for their use). If you would like to contribute artifacts for any of these companies, please contact us.

These personas are intended to represent different small and medium businesses, specifically US government contractors, as well as companies that provide services to them. Those personas are:

Government Contractors

RoleCompanyIndustryCMMC 2.0 LevelURL
Government ContractorMavis’s Machine ShopContract manufacturing organization2
Government ContractorChinda’s ChickensFood and fertilizer production1
Government ContractorGreatBigPrimeLarge prime contractor2
Government ContractorHenry’s HealthcareHealthcare provider2
Government ContractorBetter Health 4 YouHealthcare product manufacturer2
Government ContractorTongaTekSoftware developer and IT services company2

Service Providers

RoleCompanyIndustryFedRAMP or EquivalentURL
Service ProviderKlowdizeLarge cloud service provider (IaaS, PaaS, SaaS)FedRAMP High
Service ProviderUCanShareItCloud service focused on secure backups, file sharingFedRAMP Equivalency letter from reputable 3PAO
Service ProviderAbsolutely Perfect CybersecurityManaged security services providerSOC 2 Type II
Service ProviderPerpetual UptimeManaged IT services providerNo certifications
Service ProviderBrown IncidentIncident response and forensicsISO 27001
Service ProviderCover Your OrgCrisis management and PR firmNo certifications
Service ProviderLowe PriceIT consulting companyNo certifications
Service ProviderGiant ResellerCommercial Item ResellerNo certifications

The domain names listed above are all owned and controlled by the CMMC Information Institute. We will be building out websites to match their personas as time permits. There are no MX records associated with any of the domains, and that is intentional. We have no intention of creating actual E-mail accounts in any of the domains.