When Reynolds Construction learned that CMMC requirements could affect their Department of Defense contracts, they acted quickly. With only a small IT team and limited resources, outsourcing wasn’t feasible. Instead, they chose to manage compliance in-house using K2 GRC’s guided documentation and project management tools. The result? One of the first verified CMMC Level 2 certifications—completed at roughly 40% of the cost quoted by external consultants. This case study explores how a non-technical project manager led the initiative from start to finish, how K2 GRC simplified each stage of certification, and what lessons other organizations can take from their approach.