Quality and Information Security

Quality and Information Security

Built so Cannon would want to own it

Cannon's quality standard is whether it would want to own what it just built. That is verified before the work starts, while it is in progress and on the way to turnover, and the results are documented in systems the owner can see. The same discipline covers the circuit maps, as-builts and route data a contractor holds on behalf of a utility or federal client.

Information securityNIST SP 800-171CMMC Level 2 compliant
Project recordProcoresubmittals, RFIs, dailies
TestingOTDR / NETAbefore turnover or energization
PrequalificationISN / AvettaHighwire, Gold Shovel, DPI
How quality is controlled

Checked at four points, not one

  1. Constructability review

    Design and field conditions are reviewed against the owner's construction standards before mobilization, so conflicts surface on paper rather than in the trench.

  2. In-process inspection

    Crew foremen and supervision inspect as the work proceeds rather than only at completion, with hold points agreed with the owner's inspector.

  3. Testing

    OTDR testing and certification on fiber, Category 6 and 6A certification on premise cabling, and NETA-aligned testing on electrical systems ahead of energization.

  4. Turnover

    As-built documentation, test records, redlines and closeout packages delivered in the owner's format, through the owner's system where one exists.

Systems of record

Documented where the owner can see it

Procore

Project management, submittals, RFIs, drawings and daily documentation on every project.

LCPtracker and eMars

Certified payroll and prevailing wage compliance on public work, including Davis-Bacon and Service Contract Act projects.

ISNetworld, Avetta and Highwire

Contractor safety and compliance prequalification kept current and visible to the owner year round.

Damage prevention

Common Ground Alliance best practice through the Damage Prevention Institute and the Gold Shovel Standard, with locate and pothole records kept on the job.

Information security

The data a contractor holds is part of the work

A contractor on a utility or federal network holds circuit maps, as-builts, switching records and route data. That obligation flows down the contract. Cannon handles that material inside an environment built to the NIST SP 800-171 control set and is CMMC Level 2 compliant, which is the Department of Defense requirement for controlled unclassified information that has appeared in DoD contracts since November 2025.

The program is run as an information security management system aligned to ISO 27001, with ITSM principles governing IT processes, outside expertise engaged to strengthen the control framework, and regular security reviews and audits to confirm compliance. Details of the environment are shared with clients under non-disclosure agreement during prequalification. See how this applies on federal work.

NIST SP 800-171
Control set implemented across IT operations, with the required self-assessment on file.
CMMC
Level 2 compliant, aligned to Department of Defense requirements for controlled unclassified information.
ISO 27001 and ITSM
An information security management system supporting confidentiality, integrity and availability.
Assurance
Registered provider organization expertise, scheduled security reviews and audits.
Standards the work is built to

Owner standards first, industry standards underneath

  • Owner construction standards and specifications, reviewed before mobilization and carried on the job.
  • National Electrical Safety Code and National Electrical Code for power and premise electrical work.
  • TIA 568 and TIA 606-B for structured cabling, labeling and administration, installed by BICSI-trained technicians.
  • USACE EM 385-1-1 on federal installations, with activity hazard analyses submitted before each activity.
  • Common Ground Alliance best practices for locating, potholing and excavation near existing utilities.
  • Cannon's environmental practices for erosion control, spill prevention and site restoration.

Need the quality plan for a bid package?

Cannon provides project-specific quality control plans, inspection and test plans, and the information security documentation your procurement team requires.