Level 2 requires full implementation of all 110 NIST SP 800-171 practices and, for most DoD programs, a formal assessment by a CMMC Third-Party Assessment Organization (C3PAO). We prepare you for that assessment and coordinate the process.
Questions? .
Not all. Some programs allow self-assessment for Level 2. However, for DoD programs handling sensitive CUI (prioritized acquisitions), a C3PAO assessment is required. Your case manager will confirm which applies to your contracts.
A failed assessment results in a Conditional CMMC certificate with a remediation deadline. We help you address all findings quickly and resubmit for re-assessment.
Level 2 certifications are valid for 3 years. Annual affirmations are required in years 2 and 3.
Book a free 15-minute call and we'll walk you through exactly what's involved.