JULY 31, 2026 — WingSwept is excited to announce that it has successfully completed its Cybersecurity Maturity Model Certification (CMMC) Level 2 assessment, becoming a CMMC Certified MSP and further strengthening its ability to support Department of Defense (DoD) contractors with secure, compliant IT services. The certification provides independent, third-party validation that WingSwept has implemented the rigorous cybersecurity controls required to protect Controlled Unclassified Information (CUI) in accordance with the Department of Defense’s CMMC program.
A Milestone in Cybersecurity and Compliance
The Cybersecurity Maturity Model Certification (CMMC) program was established by the U.S. Department of Defense to strengthen cybersecurity throughout the Defense Industrial Base (DIB) and better protect sensitive government information from increasingly sophisticated cyber threats. Organizations that handle Controlled Unclassified Information (CUI) must implement and maintain the security controls outlined in NIST SP 800-171 and demonstrate compliance through the CMMC framework.
By earning CMMC Level 2 certification, WingSwept has demonstrated that its people, processes, and technology meet these rigorous federal cybersecurity requirements. As both a managed service provider supporting defense contractors and a defense contractor itself, WingSwept understands firsthand the operational, technical, and compliance challenges organizations face when protecting sensitive government information. While CMMC audit requirements have recently been paused, DoW contractors handling CUI must still self-certify they meet all CMMC Level 2 requirements, and certifying a non-compliant environment can be a very expensive mistake.
“Earning CMMC Level 2 certification is an important milestone for WingSwept and reflects our long-standing commitment to providing our clients with excellent cybersecurity services,” Jay Strickland, CEO and Founder of WingSwept. “As a CMMC Certified MSP, we can provide our clients with added confidence that the systems and processes we use to protect Controlled Unclassified Information have been independently assessed against the Department of Defense’s cybersecurity requirements. We’ve experienced the certification process ourselves, giving us valuable insight that helps us better support our clients as they work toward and maintain compliance.”
Why Choose a CMMC Certified MSP?
Achieving and maintaining CMMC compliance requires more than implementing cybersecurity tools. Organizations must establish comprehensive security policies, document their processes, monitor their environments, and continuously maintain the controls required to safeguard sensitive information.
Working with a CMMC Certified MSP provides defense contractors with an IT partner that understands the technical, operational, and documentation requirements necessary to support ongoing compliance. Having successfully completed its own CMMC Level 2 assessment, WingSwept is uniquely positioned to help organizations strengthen cybersecurity while preparing for evolving Department of Defense requirements.
“We’re thrilled to be certified as CMMC Level 2 compliant. WingSwept is a Managed Service Provider serving defense contractors, and we’re also a defense contractor ourselves, so it’s important that our clients know they can trust us to properly secure Controlled Unclassified Information. This certification serves as third-party validation that WingSwept’s processes for handling and storing CUI are fully CMMC compliant.” said Jeremy Spivey, Compliance Director at WingSwept.
Supporting the Defense Industrial Base
In addition to achieving CMMC Level 2 certification, WingSwept is also a Cyber AB Registered Practitioner Organization (RPO), demonstrating its commitment to helping organizations prepare for CMMC compliance through knowledgeable guidance and proven cybersecurity practices.
WingSwept is also an active member of the MSP Collective, a national community of managed service providers dedicated to advancing cybersecurity standards, collaboration, and best practices across the IT industry.
About CMMC
The Cybersecurity Maturity Model Certification (CMMC) program was developed by the U.S. Department of Defense to verify that organizations within the Defense Industrial Base have implemented appropriate cybersecurity controls to safeguard Federal Contract Information (FCI) and Controlled Unclassified Information (CUI). CMMC Level 2 requires organizations to implement all 110 security requirements defined in NIST SP 800-171 and demonstrate compliance through an independent third-party assessment.
About WingSwept
Incorporated in 2000, WingSwept is a Managed IT Services provider delivering cybersecurity, cloud, and compliance solutions to businesses and government contractors. As a NIST SP 800-171 compliant government contractor, WingSwept helps organizations strengthen cybersecurity, achieve compliance, and leverage technology to meet their business goals. WingSwept proudly serves businesses throughout central North Carolina, northern Virginia, Maryland, and the Washington, D.C. metro area, including Apex, Cary, Chapel Hill, Durham, Fayetteville, Greensboro, and Raleigh, North Carolina; Alexandria, Arlington, Chantilly, Fairfax, Manassas, Reston, and Tysons Corner, Virginia; Bethesda, Derwood, and Rockville, Maryland; Washington, D.C.; and the surrounding communities.
Looking Ahead as a CMMC Certified MSP
As cybersecurity threats continue to evolve and CMMC requirements become increasingly important across the Defense Industrial Base, WingSwept remains committed to helping defense contractors navigate complex compliance requirements with confidence. Through continued investment in cybersecurity expertise, managed IT services, and compliance solutions, the company will continue supporting organizations as they protect sensitive information, maintain contract eligibility, and strengthen national security.
Learn How WingSwept Can Help
Whether your organization is beginning its CMMC journey or preparing to maintain compliance, WingSwept’s team can help you strengthen your cybersecurity posture with managed IT services, compliance guidance, and security solutions designed for Department of Defense contractors.
To learn more about Who We Are, and how we can help your organization reach technology need, please visit Contact Us.