On October 30, Enduvo completed its NIST SP 800-171 self-assessment for our government enclave with a perfect score of 110, submitted to the Department of War’s (DoW) Supplier Performance Risk System (SPRS). That gives us CMMC Level 2 (Self) status, and we’re proud of the team that got us here.
What Level 2 covers
CMMC sets the cybersecurity requirements for companies that handle sensitive information on DoW programs. Level 2 applies to Controlled Unclassified Information (CUI) and covers the 110 security requirements in NIST SP 800-171, from access control and encryption to incident response and training. Our score of 110 means our government enclave met every requirement, with no open remediation items. Our status is recorded in SPRS, and we reaffirm it every year.
Why it matters for the work we do
Readiness depends on expertise that lives in people, source material and the work itself, from aircraft maintenance to mission review. When that knowledge involves CUI, programs need to know it’s protected. Our government enclave is where we handle it, under the NIST SP 800-171 safeguards DoW requires.
What it means for programs and partners
- Ready for Level 2 (Self) work. We can support contracts and subcontracts that call for CMMC Level 2 (Self), subject to each one’s specific requirements.
- Easier due diligence. We can provide our documented status to support a prime’s supplier review and flow-down checks.
Teaming with Enduvo
On qualifying opportunities, our government enclave helps us lead as prime and bring in partners whose capabilities complement ours. Each partner still meets the cybersecurity requirements of its own work, and we work through those requirements together for each opportunity.
Working on a DoW program or looking for a teaming partner? Let’s talk.