Knowesis Achieves CMMC Level 2 Certification, Reinforcing Its Commitment to Defense Cybersecurity

FAIRFAX, Va., Sept. 11, 2026 /PRNewswire/ -- Knowesis announced today that it has successfully completed its Cybersecurity Maturity Model Certification (CMMC) Level 2 assessment. The certification confirms that Knowesis' CMMC assessment scope satisfies the Level 2 requirements for protecting Controlled Unclassified Information (CUI).

CMMC Level 2 requires organizations to implement all 110 security requirements in NIST 800-171, Revision 2, across 14 security requirement families. Achieving this level demands more than a technical upgrade. Contractors must develop extensive documentation, including a System Security Plan that often grows three to five times longer than the plans required at lower certification tiers, and they must submit to a third-party assessment conducted by a Certified Third-Party Assessment Organization, or C3PAO.

On July 13, 2026, the Department of War (DoW) suspended the rollout of CMMC Phase II, which would have made third-party C3PAO audits mandatory, and launched a 60-day review of the program. Phase I self-assessment requirements and annual affirmations remain in effect, and officials have encouraged contractors already pursuing Level 2 certification to continue their efforts as the department works toward a reformed, resumed timeline.

Knowesis ranked highly in its evaluation scoring and was readily approved for certification by the third party evaluation body. By completing its Level 2 assessment ahead of this reform period, Knowesis positions itself as a trusted partner for federal agencies and prime contractors that need proven, audit-ready cybersecurity practices now. The certification builds on Knowesis' existing security posture, which includes its ISO 9001:2015 Quality Management Systems registration, and ISO 27001:2022 Information Security Systems registration.

Knowesis views the achievement of CMMC Level 2 certification as a reflection of the discipline and commitment invested in building cybersecurity practices capable of withstanding independent, third-party assessment. As the DoW reviews the future implementation of the CMMC program, Knowesis has already demonstrated that its CMMC environment meets the Level 2 requirements for protecting CUI. The certification provides customers and partners with added assurance that Knowesis is prepared to protect sensitive information and securely support missions involving CUI.

Knowesis is a Center for Veterans Enterprise (CVE) certified Service-Disabled Veteran-Owned Small Business (SDVOSB) and a certified Woman-Owned Small Business (WOSB), providing a full range of professional consulting services to federal and state government agencies to include Scientific and Medical Research, Data and Computational Science, Information Management  and Technology, Operations and Management, Strategic Communications, and Policy and Program Evaluation. We currently support multiple entities within the Departments of Defense, Veterans Affairs, Homeland Security, and Health and Human Services.

Knowesis maintains offices in Fairfax, Virginia, with staff at locations across the United States. More information about the company can be found at https://www.knowesis-inc.com/ as well as on LinkedIn.

SOURCE Knowesis Inc.