The addition of Open approach to the MSP Collective's ESP directory as a validated CMMC Level 2 assessment certified provider makes the company one of the few IT security companies independently verified to meet federal cybersecurity criteria.
-- Open Approach, a CMMC Level 2 certified managed IT and security provider headquartered in Burlington, Vermont, today announced that it has been included in the ESP Directory maintained by the MSPs for the Protection of Critical Infrastructure (MSP Collective). Open Approach is one of more than 45 organizations on this carefully vetted list. All of which have achieved CMMC Level 2 Assessment Certification and had that certification independently validated by the MSP Collective in coordination with the C3PAO (Certified Third-Party Assessor Organization) that conducted the assessment.
The ESP (External Service Provider) Directory is a first-of-its-kind resource for the defense industrial base (DIB) and critical infrastructure sector. It provides procurement professionals, prime contractors, and compliance officers with a verified shortlist of MSPs and MSSPs that have met the rigorous cybersecurity standards demanded by the U.S. Department of War — removing guesswork and risk from the vendor selection process.
Unlike self-attested compliance claims, inclusion on the ESP Directory requires that each listed organization's CMMC Level 2 Assessment Certification has been cross-verified with the C3PAO that performed the independent audit. This validation process ensures that every ESP on the list has genuinely implemented and operationalized the 110 security practices aligned with NIST SP 800-171 Rev 2 — practices that protect Controlled Unclassified Information (CUI) across the defense supply chain.
“Being listed on the MSP Collective’s ESP Directory is meaningful precisely because it isn’t self-reported. The MSP Collective validated our CMMC Level 2 Assessment Certification directly with the C3PAO that assessed us. For defense contractors who need to know their MSP can hold up under scrutiny, this listing is the proof point. It tells them that Open Approach has been independently audited, that our controls are real, and that we’re operating at the standard the DoW requires. That’s the level of assurance our clients deserve.”
— Scott Bernoudy, CEO, Open Approach
Open Approach’s inclusion in the ESP Directory builds on its established reputation as one of the most credentialed MSPs in the region. The company holds a rare combination of certifications — CMMC Level 2, Cyber Verify Level 3, and SOC 2 Type II — that together place it among the top one percent of managed service providers worldwide. The company serves defense contractors, manufacturers, healthcare organizations, and other highly regulated businesses.
As the DoW continues to enforce CMMC requirements across its supply chain, working with a verified ESP is becoming increasingly critical for defense contractors seeking to bid on and retain federal contracts. The MSP Collective’s ESP Directory simplifies that process by centralizing a list of providers who have already cleared the bar — giving contractors confidence that their IT partner is not a compliance liability.
About Open Approach
Open Approach is a CMMC Level 2 certified, RPO-registered managed IT and security provider headquartered in Burlington, Vermont, with offices in Fort Collins, Colorado. For nearly two decades, the company has helped businesses build reliable, responsive, and secure IT environments through managed IT, cybersecurity, CMMC compliance, and strategic planning services. Open Approach is one of a select few MSPs worldwide to hold CMMC Level 2, Cyber Verify Level 3, and SOC 2 Type II certifications simultaneously. The company has been recognized as a Vermont Best Place to Work and a Best of Business Award winner for IT Services. To learn more, visit openapproach.com or call (802) 242-4050.
About the MSP Collective
MSPs for the Protection of Critical Infrastructure (MSP Collective) is an industry organization dedicated to advancing the cybersecurity posture of managed service providers serving the defense industrial base and critical infrastructure sectors. The MSP Collective’s ESP Directory is a validated resource listing CMMC Level 2 Assessment Certified ESPs whose certifications have been verified in coordination with their assessing C3PAOs. Learn more at mspcollective.org.
Contact Info:
Name: Emily Osiecki
Email: Send Email
Organization: Open Approach, Inc.
Phone: 802.242.4050 x7036
Website: https://openapproach.com/
Release ID: 89192741
Should any errors, concerns, or inconsistencies arise from the content provided in this press release that require attention or if a press release needs to be taken down, we kindly request that you immediately contact us at error@releasecontact.com (it is important to note that this email is the authorized channel for such matters, sending multiple emails to multiple addresses does not necessarily help expedite your request). Our efficient team will be at your disposal for timely assistance within 8 hours – taking necessary measures to rectify identified issues or providing guidance on the removal process. We prioritize delivering accurate and reliable information.
