

Choosing a CMMC Level 2 partner? Learn how defense contractors can evaluate MSPs, consultants, and ESPs to protect CUI and pass certification.

While it’s certainly possible for your current MSP to manage your IT in a way that enables CMMC Level 2 compliance, the toolset and knowledge required is highly specialized and your average MSP may not be up to the task.

With the Level 1 Cybersecurity Maturity Model Certification (CMMC) becoming required on Department of Defense (DoD) Contracts containing Federal Contract Information (FCI) sometime between late October 2025 and February 2026, it is important for those companies working with the DoD to establish their current cybersecurity maturity and standing against the new requirements.