Chromalloy Achieves CMMC Level 2 Certification

Chromalloy, a global leader in aftermarket engineering and manufacturing solutions for the aviation, defense, and energy sectors, has achieved Cybersecurity Maturity Model Certification (CMMC) Level 2. This certification, awarded by the U.S. Department of Defense, validates the company's robust cybersecurity controls and its ability to safeguard Controlled Unclassified Information (CUI).

The certification was granted following an independent assessment by Redspin, a Certified Third-Party Assessment Organization (C3PAO). According to the assessment, Chromalloy successfully implemented all 110 security requirements contained in NIST SP 800-171 across its enterprise IT systems and operating locations. This includes a comprehensive suite of cybersecurity measures designed to protect sensitive information and ensure compliance with evolving Defense Federal Acquisition Regulation Supplement (DFARS) requirements and DoD cybersecurity standards.

"This certification is a significant milestone for Chromalloy and underscores our commitment to operational excellence, cybersecurity, and customer trust," said Tano Maenza, Chief Information Officer at Chromalloy. "As aerospace and defense programs continue to prioritize supply chain security, this certification demonstrates our ability to protect sensitive information and support mission-critical customer requirements."

Eric Hillewaert, Vice President of Military Business Development and Programs at Chromalloy, added, "Achieving CMMC Level 2 certification opens the door to deeper participation in defense and government-related programs across our aftermarket and MRO business. It gives our customers confidence that they can bring us their most sensitive programs, knowing Chromalloy meets the same rigorous security standard the Department of Defense requires of its most trusted suppliers."

The achievement positions Chromalloy among a select group of aerospace aftermarket and MRO providers to reach CMMC Level 2, positioning it ahead of full enforcement of the requirement across the defense industrial base. The certification strengthens Chromalloy's ability to support existing and future U.S. Department of Defense programs requiring the secure handling of Controlled Unclassified Information (CUI) and reinforces the company's position as a trusted partner for customers with stringent supply chain security requirements.

"Chromalloy's commitment to cybersecurity is integral to our business operations and customer relationships," Maenza emphasized. "This certification is a testament to the efforts of our IT team and our dedication to maintaining the highest standards of data protection."

The company has been a leading provider of engineering, manufacturing, and repair services for the aerospace, military, aero-derivative, and energy/industrial gas turbine aftermarket for 75 years. With over 20 locations worldwide, Chromalloy continues to invest in design engineering, testing, and component manufacturing to ensure that all regulatory and performance criteria are met or exceeded.