Client case study · CMMC Level 1 work ongoing
Federal Contractor: Google Workspace Files & Windows Controls
A federal contractor using Google Workspace was undertaking CMMC Level 1 preparation. Users had been sharing credentials to access organizational resources, including files and other users’ mailboxes. Rebnetik configured a shared folder structure and added Windows systems to Azure AD to centralize management of controls.
- Client
- Federal contractor, name withheld
- Environment
- Google Workspace / Windows / Azure AD
- Status
- Readiness work in progress
The starting point
Shared credentials were being used to reach business resources.
The organization’s resource access relied on shared credentials. Alongside the need to organize shared files, Windows systems needed a centralized basis for applying access control policies, system integrity controls, and incident response controls. The engagement addressed collaboration and system control as related, distinct needs.
Work delivered
Shared files and centralized Windows controls.
Configured the shared folder structure
Rebnetik configured a shared folder structure in Google Workspace for organizational collaboration. This addressed the arrangement of shared files within the platform the contractor was already using.
Centralized Windows systems in Azure AD
Windows systems were added to Azure AD to centralize access control policies, system integrity controls, and incident response controls. The work connected Windows system management with the contractor’s broader readiness effort.
Implementation status
What is in place. What remains ongoing.
The shared folder structure is configured, and Windows systems have been added to Azure AD for centralized controls. The organization’s broader CMMC Level 1 readiness work remains ongoing.
What this means for a similar business
A Google Workspace environment can still need a separate plan for managing Windows systems. Organizing collaboration files and centralizing device controls address different parts of the environment. For another contractor, the appropriate design would depend on its systems, users, access needs, and agreed readiness scope.
Rebnetik’s role in these engagements is readiness and implementation support. This case study does not represent an independent CMMC assessment or certification decision.