Spectra Defense Technologies Achieves CMMC Level 2 Certification

Spectra Defense Technologies, a global provider of command, control, communications, computers, cyber, intelligence, surveillance and reconnaissance for aerospace and defense customers, announced Tuesday it has achieved a final level 2 status of Cybersecurity Maturity Model Certification (CMMC). The company is now fully compliant with U.S. Department of War (DOW) requirements for handling controlled unclassified information.

Under the Defense Federal Acquisition Regulation Supplement cybersecurity mandate, contractors will need to be fully CMMC certified by November 10 to be eligible for DOW contracts involving controlled unclassified information.

According to a Spectra press release, the company is one of the early CMMC-certified contractors, while many defense contractors are in the early stages of compliance.

“CMMC certification reinforces our position as a trusted, compliant partner within the Defense Industrial Base,” said Ray Munoz, chief executive officer of Spectra Defense Technologies. “This certification independently validates our cybersecurity controls and reinforces our readiness to protect sensitive government information across the defense programs we support. This certification gives our customers and partners full confidence that we are ready to meet evolving DOW requirements.”

CMMC level 2 certification requires compliance with all 110 security practices in the National Institute of Standards and Technology Special Publication 800-171, documented procedures for cybersecurity functions and completion of assessments that test compliance. For level 2 certification specifically, an assessment is performed by a third-party assessment organization to evaluate the CMMC level of an organization.

Spectra’s early CMMC certification will allow it to support prime contractors and subcontractors across complex, multivendor programs and safeguard controlled unclassified information across the defense industrial base supply chain with verified cyber controls, the release stated.