Dayton Group Inc. Achieves Perfect 110/110 on JSVA and Expands Business Opportunities

Background 

As a small business, Dayton Group Inc. (DGI) needed a trustworthy, streamlined solution to comply with impending Cybersecurity Maturity Model Certification (CMMC) standards. Their setup was lean, with employees frequently multitasking across roles, leaving little bandwidth for complex, time-consuming compliance solutions like file sharing tools. DGI hoped to invest in a solution that would secure federal contracts and prepare for future growth. After weighing several options, they turned to Summit 7 for a holistic solution: migrating entirely into Microsoft GCC High and configuring their whole environment for CMMC.  

“With everyone on our team wearing two hats, the last thing we needed was a system where everyone had to decide where each piece of data belonged. It had to be seamless.” – Yehen Wijedoru, Compliance Consultant at Dayton Group Inc. 

Challenge 

As DGI reviewed its options, it became clear that choosing one of the segmented systems they were considering, like PreVeil’s file-sharing tool, would create operational headaches. With employees managing contracts across multiple government sectors, enforcing strict data boundaries wasn’t feasible. Moreover, small user error missteps—like misplacing data in the wrong folder—could jeopardize sensitive government information, leading to costly compliance risks.  

DGI realized that going “All-In” with GCC High, backed by Summit 7’s CMMC Level 2 Solution, would provide the most comprehensive and user-friendly approach. They needed a solution that could automatically secure data, prevent user error, and simplify management for their small team. “A separate file-sharing tool may be cheaper up front, but for a team where everyone is double-hatting, that’s double the work—and double the risk,” Wijedoru shared.  

Solution 

DGI opted to partner with Summit 7 to migrate their operations to Microsoft GCC High. Summit 7’s specialization in CMMC compliance and deep expertise in GCC High migrations stood out during DGI’s evaluation. They wanted more than just a migration—they needed a streamlined compliance solution that would safeguard their data, protect user access, and ensure data integrity with minimal manual oversight. 

Summit 7 implemented a full migration to GCC High, configured Intune Endpoint Manager, and mapped the environment to NIST SP 800-171 controls, simplifying compliance for DGI’s lean team. Intune automatically managed device security, blocking access if devices became non-compliant, and Purview enforced important Data Loss Prevention (DLP) policies. As a result, DGI could manage compliance without intensive oversight or employee micromanagement.  

Wijedoru explained, “Summit 7’s CMMC solution went beyond migration. They clearly mapped out each compliance control we’d need and set up systems to enforce it automatically. CMMC just became a lot simpler for us.” 

Results

With Summit 7’s GCC High migration, DGI earned a flawless 110 out of 110 score on their JSVA assessment, which will automatically translate to a CMMC Level 2 certification once the rule is finalized. Choosing GCC High enabled them to bid on International Traffic in Arms Regulations (ITAR) contracts as well, opening new opportunities for federal contracts and business expansion. By going with a comprehensive GCC High solution, DGI avoided the pitfalls of complex manual file-sharing controls that would have hindered their growth and productivity. 

Summit 7’s expertise allowed DGI to streamline operations, secure CUI with ease, and bid on contracts that would previously have been out of reach. As a result, DGI is now compliant, positioned for new partnerships, and geared up for long-term growth. 

“Summit 7’s clarity and specialization meant we knew exactly what we were getting. This isn’t just compliance—it’s a business advantage.” - Yehen Wijedoru, Compliance Consultant at Dayton Group Inc.