Security & Compliance Intelligence

CMMC.
Intelligence.

Guides, regulatory breakdowns, and assessment readiness resources for defense contractors.

Last updated August 4, 2026

66 Guides & Articles
14 CMMC Domains Covered
110 Requirements Referenced
1%
of Defense Industrial Base contractors are fully prepared for a CMMC Level 2 assessment.
CyberSheath State of the DIB Report, 2025
What used to take our team three weeks to pull together for an assessment we now produce in an afternoon. The SSP and evidence matrix come out ready to hand to the C3PAO.
IT Director, Tier 2 Defense Manufacturer
$488K
estimated by the DoD for a small business to achieve and sustain CMMC Level 2 over three years.
DoD CMMC Regulatory Impact Analysis (32 CFR Part 170)
We had a consultant quoted at $180K to get us assessment-ready. 1TEN got us there for a fraction of that. The guided questions alone saved us months of back-and-forth.
VP of Operations, Aerospace Subcontractor
Nov 2026
Phase 2 begins. The DoD can start requiring a Level 2 third-party certification in new solicitations. The binding constraint is assessment capacity, not the date.
32 CFR Part 170 phased rollout
Our SPRS score went from -67 to +98 in four months. Having every requirement mapped to evidence in one place made the difference — our assessor commented on how organized the documentation was.
Program Manager, Defense Electronics Contractor
320
assessment objectives in NIST SP 800-171A support the 110 security requirements evaluated during a CMMC Level 2 assessment.
NIST SP 800-171A
AC SC CM
2026-03-05 · 12 min read

Defense Electronics and Sensors: How CUI Flows Through Engineering Documentation

Firmware, circuit designs, and test specifications for defense electronics and sensor systems are CUI. A practical guide to CMMC scope boundaries in defense electronics manufacturing environments.

Read the guide →
3 Years
is the standard validity period of a successful CMMC Level 2 certification.
32 CFR Part 170
110
security requirements from NIST SP 800-171 Rev 2 form the foundation of every CMMC Level 2 assessment.
NIST SP 800-171 Rev. 2
AC SC CM
2026-02-19 · 10 min read

CMMC for Weapons and Munitions Manufacturers: Managing CUI in Controlled Production Environments

Weapons and munitions manufacturers integrate physical security with digital compliance in ways no other defense sector does. A practical guide to CMMC scope in controlled production environments.

Read the guide →
AC SC CM
2026-02-05 · 9 min read

CMMC for Naval and Maritime Suppliers: Ship System Data and Assessment Scope

Naval architecture drawings, ship repair specifications, and combat systems documentation present distinct CMMC scoping challenges. A practical guide for naval and maritime defense suppliers.

Read the guide →
14
security domains organize the 110 CMMC Level 2 requirements, from Access Control to System & Information Integrity.
NIST SP 800-171 Rev. 2
AC SC CM
2026-01-22 · 10 min read

MRO Contractors and CMMC: Why Sustainment Work Is Often the Most Complex Scope

Maintenance records, technical manuals, and repair specifications for active defense platforms represent some of the most complex CMMC scoping challenges. A practical guide for MRO contractors.

Read the guide →
AC SC CM
2026-01-08 · 10 min read

CMMC for Ground Vehicle Manufacturers and Tier 2 Suppliers: Navigating Flow-Down Requirements

Prime contractor flow-down audits are happening now. Sub-tier ground vehicle suppliers face CMMC obligations they may not have formally accepted. A practical guide to navigating flow-down requirements.

Read the guide →
AC SC CM
2025-12-26 · 12 min read

CMMC Level 2 for Aerospace & Defense Manufacturers: What Counts as CUI on Your Shop Floor

Technical drawings, CNC programs, inspection records, and ERP data — a practical guide to identifying CUI scope for aerospace and defense manufacturers facing CMMC Level 2 assessment.

Read the guide →

Prepare for assessment.

1TEN structures your compliance posture across all 14 CMMC domains and produces the evidence package your C3PAO will request.

Request a Demo