GFT Achieves CMMC Level 2 Certification

GFT achieved Cybersecurity Maturity Model Certification (CMMC) Level 2 in October, strengthening the firm's ability to protect sensitive federal information.

For federal agencies, prime contractors, and teaming partners, the certification provides independent validation that GFT has established the security controls required to handle Controlled Unclassified Information (CUI) within its certified environment. It also expands the firm's ability to support federal contracts that require those protections.

CMMC was established to protect sensitive defense information. The program assesses how federal contractors safeguard federal contract information and CUI, with requirements based on the sensitivity of the information involved.

CMMC Level 2 aligns with 110 security requirements in the National Institute of Standards and Technology Special Publication 800-171, Revision 2. Those requirements address how organizations control access to sensitive information, identify and respond to security incidents, manage risk, protect communications, and maintain the integrity of their systems.

GFT's certification applies to a separate federal environment established specifically for work involving CUI.

Achieving certification required GFT to demonstrate implementation of security requirements across 14 areas, including access control, audit and accountability, incident response, risk assessment, security assessment, system and communications protection, and system and information integrity.

Together, those requirements govern how CUI is accessed, shared, monitored, and protected within GFT's certified environment.

With CMMC Level 2 in place, GFT is positioned to take on federal projects requiring CUI protection while giving clients and teaming partners documented, independently verified assurance that those requirements are met.