Dragos Public Sector Achieves CMMC Level 2 Certification
Summary: Dragos Public Sector achieved CMMC Level 2 certification after an independent assessment by a Certified Third-Party Assessment Organization, covering an enterprise environment built in a FedRAMP High authorized cloud. The assessment found all 110 security requirements in NIST SP 800-171 Rev. 2 implemented with no Plans of Action and Milestones, spanning 14 security requirement families.
Key Takeaway: A zero-POA&M result means every one of the 110 CUI safeguards was operating at assessment time rather than deferred - the distinction the Defense Industrial Base now has to prove under DFARS 252.204-7012 and 252.204-7021.
Read the original at Dragos Blog ↗
- Topics
- OT / ICS & Critical Infrastructure
- Related
- Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026How to Assess OT Incident Response Preparedness Cyber Risks · Nov 10, 2026Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Cyber Risks · Nov 10, 2026