Take2 Consulting, LLC has achieved Cybersecurity Maturity Model Certification (CMMC) Level 2, marking a major milestone in the company’s commitment to protecting Controlled Unclassified Information (CUI) and supporting mission-critical federal programs.

This certification follows Take2’s successful completion of a comprehensive, independent CMMC Level 2 assessment conducted by an authorized Certified Third-Party Assessment Organization (C3PAO). The assessment evaluated Take2 against the full scope of NIST SP 800-171 requirements, examining hundreds of detailed assessment objectives spanning technical safeguards, policies, procedures, and operational evidence. The results validated Take2’s sustained, enterprise-wide implementation of cybersecurity controls across systems, processes, and documentation.

CMMC Level 2 certification is now a formal requirement under DFARS 252.204-7021. According to recent Department of Defense estimates, roughly 80,000 companies in the Defense Industrial Base (DIB) will ultimately need Level 2 certification; yet as of late 2025, only a few hundred contractors nationwide—representing less than 1%—have successfully completed full Level 2 certification. This achievement places Take2 among a very small, early-adopter group of fully certified firms, uniquely positioning the company to support federal and defense clients navigating new CMMC compliance requirements.

Why Take2’s CMMC Certification Matters

“We are incredibly proud of our team for achieving CMMC Level 2 certification,” said Lisa Kurz, President and Chief Executive Officer of Take2. “This milestone reflects our unwavering commitment to cybersecurity and protecting our clients’ sensitive information.”

CMMC Level 2 certification is valid for three years and requires continuous monitoring and annual reaffirmation. Take2 has implemented internal audits, employee training, and proactive security enhancements to maintain ongoing readiness.

More information is available at www.take2it.com.