CMMC 2.0 is a DoD program requiring defense industrial base contractors to demonstrate cyber security maturity. Level 2 aligns with NIST SP 800-171 (110 controls) and is required for contractors handling Controlled Unclassified Information (CUI).
Any organisation in the US defense supply chain handling CUI is subject to CMMC 2.0 Level 2. Level 3 applies to programs handling the most sensitive unclassified information.
Prime contractors and subcontractors to the US DoD, defense industrial base manufacturers, integrators, and any organisation receiving CUI under a federal contract.
Every US CMMC 2.0 requirement mapped to the Cloudgenics technical controls that satisfy it, with traceability.
Telemetry, configuration scans and audit logs streaming into a tamper-evident evidence store with retention aligned to the framework.
Standardised auditor walkthrough materials — diagrams, run-books and policy templates — that fast-track the assessment.