Justice IT Consulting Becomes Only Texas-Based Managed Service Provider Certified at CMMC Level 2

Justice IT Consulting, a Burleson, Texas-based managed service provider, has earned Cybersecurity Maturity Model Certification (CMMC) Level 2 certification, becoming the only Texas-based managed service provider on a national directory of independently validated providers protecting the U.S. defense supply chain.

The company's certification is listed on the ESP Directory maintained by the MSP Collective, a directory that cross-verifies each listing directly with the accredited third-party assessor, or C3PAO, that conducted the audit. As of September 30, 2026, 56 providers nationwide appeared on that directory, with two headquartered in Texas. Justice IT Consulting is the only one of them that operates as a managed service provider.

The Department of Defense created the certification program to protect the country's defense supply chain from foreign adversaries who target smaller subcontractors instead of prime contractors with larger security budgets. CMMC Level 2 applies to companies that handle controlled unclassified information and aligns with the 110 security requirements in the National Institute of Standards and Technology's Special Publication 800-171, known as NIST SP 800-171. In its most rigorous form, Level 2 certification must be validated by an accredited third-party assessor, or C3PAO, rather than self-declared. Requirements tied to the certification began appearing in Department of Defense contracts on November 10, 2025.

Justice IT Consulting, founded in 2003, spent its early years providing information technology support to small and mid-sized businesses across the Dallas-Fort Worth region. Its move into defense-focused cybersecurity began in 2017, when an aerospace machine shop client needed to meet NIST SP 800-171 requirements passed down through a prime contractor and had nowhere else to turn. The company built its compliance expertise from that engagement and now helps its own clients, many of which supply major aerospace and defense manufacturers, work toward the same requirements.

Justice IT Consulting works to strengthen the small and mid-sized suppliers that make up the backbone of the U.S. defense industrial base, and shares free compliance guidance through its podcast, The CMMC Compliance Guide.