Knowesis Achieves CMMC Level 2 Certification

FAIRFAX, Va., Sept. 11, 2026 /CourierPR/ -- Knowesis, a Center for Veterans Enterprise (CVE) certified Service-Disabled Veteran-Owned Small Business (SDVOSB) and a certified Woman-Owned Small Business (WOSB), has achieved Cybersecurity Maturity Model Certification (CMMC) Level 2. This significant milestone confirms that the company meets the stringent requirements for protecting Controlled Unclassified Information (CUI) as set by the Department of War (DoW).

The CMMC Level 2 certification requires organizations to implement all 110 security requirements outlined in NIST 800-171, Revision 2, across 14 security requirement families. This involves extensive documentation, including a System Security Plan that can grow three to five times longer than plans required at lower certification tiers. The certification process also includes a rigorous third-party assessment by a Certified Third-Party Assessment Organization (C3PAO).

Knowesis successfully completed its Level 2 assessment ahead of the DoW's suspension of CMMC Phase II, which was set to make third-party C3PAO audits mandatory. The company ranked highly in its evaluation and was readily approved for certification by the third-party evaluation body. This achievement positions Knowesis as a trusted partner for federal agencies and prime contractors, offering proven, audit-ready cybersecurity practices.

The certification builds on Knowesis' existing security posture, which includes ISO 9001:2015 Quality Management Systems registration and ISO 27001:2022 Information Security Systems registration. Knowesis views this certification as a reflection of the discipline and commitment invested in building cybersecurity practices capable of withstanding independent, third-party assessment.

As the DoW reviews the future implementation of the CMMC program, Knowesis has already demonstrated that its CMMC environment meets the Level 2 requirements for protecting CUI. This certification provides customers and partners with added assurance that Knowesis is prepared to protect sensitive information and securely support missions involving CUI.

Knowesis provides a full range of professional consulting services to federal and state government agencies, including scientific and medical research, data and computational science, information management and technology, operations and management, strategic communications, and policy and program evaluation. The company currently supports multiple entities within the Departments of Defense, Veterans Affairs, Homeland Security, and Health and Human Services.

With offices in Fairfax, Virginia, and staff across the United States, Knowesis is well-positioned to meet the cybersecurity needs of its diverse clientele. The company's commitment to robust cybersecurity practices underscores its dedication to supporting federal missions and protecting sensitive information.