Forvis Mazars Earns Accreditation as C3PAO in Cybersecurity Maturity Model Certification Program

TYSONS, Va., Sept. 21, 2026 /CourierPR/ -- Forvis Mazars, one of the largest public accounting and consulting firms in the United States, has achieved a significant milestone by earning accreditation as a Certified Third-Party Assessment Organization (C3PAO) under the Cybersecurity Maturity Model Certification (CMMC) program. This accreditation makes Forvis Mazars one of the first organizations in the nation to hold this prestigious status, formally accredited under ISO/IEC 17020, which sets requirements for the competence, impartiality, and consistency of inspection bodies.

The firm's achievement is a testament to its commitment to supporting the cybersecurity objectives of the federal government. As an accredited C3PAO, Forvis Mazars is now authorized to conduct CMMC assessments for companies in the U.S. defense industrial base seeking Level 2 certification. This role is crucial as it helps verify that defense contractors have implemented cybersecurity practices designed to protect Controlled Unclassified Information (CUI).

Forvis Mazars has consistently been at the forefront of this rigorous process. The firm was previously one of the earliest and largest organizations to achieve authorized C3PAO status.

The CMMC framework was developed by the U.S. Department of Defense to ensure that organizations handling Federal Contract Information (FCI) and CUI maintain cybersecurity practices appropriate to the sensitivity of the information they manage. As CMMC requirements continue to be incorporated into defense contracts, organizations throughout the defense supply chain are preparing for certification assessments that may be required for contract eligibility.

Forvis Mazars, with its 7,000 dedicated team members, provides a wide range of services to clients in all 50 states and internationally through the global network of Forvis Mazars Global. The firm's CMMC capabilities build upon its broader experience in helping organizations address complex security, governance, and regulatory challenges. For organizations interested in learning more about CMMC readiness, certification requirements, or assessment services, Forvis Mazars offers comprehensive support. More information can be found on their website at Forvis Mazars.