ITG and client partnership for CMMC compliance

Integration Technologies Group: Federal IT Integrator Since 1984


Integration Technologies Group (ITG) is a federal IT integrator founded in 1984 and certified at CMMC Final Level 2 (C3PAO): 110 of 110 NIST SP 800-171 requirements, enterprise scope, assessed December 16, 2025.


Who is ITG, and why did it build SENTRE?

Integration Technologies Group, Inc. (ITG) is a federal IT integrator founded in 1984 and headquartered in Falls Church, Virginia. ITG built SENTRE, its dedicated CUI enclave, for its own federal contracts first, and an independent C3PAO assessed ITG at CMMC Final Level 2 (C3PAO): 110 of 110 requirements, enterprise scope.

The build took real effort. ITG spent more than 10 months, with 4 dedicated IT and business consultants and 5 part-time staff, building the environment, implementing all 110 NIST SP 800-171 requirements, updating its SPRS record and passing the C3PAO assessment on December 16, 2025. That is the work customers do not have to repeat.

ITG’s best-practices know-how, coupled with its experience in implementations for over 500 private sector clients and standards such as ISO/IEC 27001, a Cybersecurity Supply Chain Risk Management (C-SCRM) plan built on NIST SP 800-161 and approved by GSA’s 2GIT team, and multiple CMMI constellations, played the key role in crafting the rules, documentation and technical solutions, culminating in the final integration and productization of the Secure Enterprise Resource.

We built SENTRE because NIST SP 800-171 compliance has to be achievable and sustainable for real federal contractors, including those that handle CUI for the Department of War (DoW, also DoD). SENTRE is built from the same assessed design, documentation and operating model customer-zero case study →, adapted to each organization and managed by ITG.


ITG at a glance

The identifiers below are the ones on ITG’s federal registration, so you can check them against SAM.gov and the CMMC records in SPRS.

Company Facts

Headquarters

3180 Fairview Park Drive, Suite 175, Falls Church, VA 22042

Founded

1984

CMMC

CMMC Final Level 2 (C3PAO), 110 of 110, UID L200001152

Cyber AB

Registered Practitioner Organization (RPO)

CAGE / UEI

1EJ55 / M7KUEGMEKNV4


Which credentials does ITG hold?

ITG credentials, scope and dates
CredentialScopeDate
CMMC Final Level 2 (C3PAO), UID L200001152Enterprise, CAGE 1EJ55; NIST SP 800-171 Rev 2, 110 of 110Assessed Dec 16, 2025; valid to Dec 15, 2028 with annual affirmations
ISO 9001:2015, BSI FS 830489Provision, maintenance and repair of IT equipment and printers; design and development of IT solutions and softwareOct 3, 2025 to Oct 2, 2028
ISO/IEC 27001:2022, BSI IS 830490Protection of company and customer information in providing IT equipment, software and servicesOct 3, 2025 to Oct 2, 2028
ISO/IEC 20000-1:2018, BSI ITMS 830491Call management support, IT field support coordination, internal IT support at Falls Church HQOct 3, 2025 to Oct 2, 2028
CMMI-DEV and CMMI-SVC Maturity Level 3Appraisal 67287Valid to Mar 11, 2027
O-TTPS (ISO/IEC 20243), self-certifiedITG Business Unit, The Open Group programApr 12, 2019 to Apr 12, 2028
DCAA-audited accounting systemAccounting system design, approved by the DCMA ACO under DFARS 252.242-7005Determination 2019
C-SCRM Plan (NIST SP 800-161), approved by GSA 2GITAudited, updated and approved by the GSA 2GIT team; basis for C-SCRM verified products under the 2GIT BPA; used on several contractsApproved Jun 7, 2023; 2GIT BPA ended Sep 30, 2026
Cyber AB Registered Practitioner Organization (RPO)Listed on the Cyber AB MarketplaceCurrent

What does ITG’s CMMC credential mean for your organization?

ITG’s CMMC Final Level 2 (C3PAO) status covers ITG’s own enterprise, not its customers. What it gives you is evidence that the environment SENTRE is built on has passed an independent assessment against all 110 NIST SP 800-171 Rev 2 requirements, with enterprise scope.

Your own status still comes from your own self-assessment and annual affirmation or, where a contract requires it, your own C3PAO assessment. Starting from an assessed environment changes how much work stands between you and that point, not who signs for it.

ITG’s status is also kept current the same way yours would be: through annual affirmations, the next due on December 16, 2026. As a Cyber AB Registered Practitioner Organization (RPO), ITG helps organizations prepare; it does not assess them. If an affirmation were missed, ITG’s status would lapse, which is why the date is tracked as closely as any customer’s.


CMMC Must Be Achievable, Predictable, and Sustainable

“At ITG, we believe that CMMC must be achievable, predictable, and operationally sustainable for real federal contractors, not just for lab environments. By implementing and validating all 110 CMMC Level 2 controls in our own SENTRE environment, we’ve proven that our architecture, processes, and documentation can withstand independent assessment. We are now bringing that same proven approach to our customers as a turnkey solution.”

Michael P. Angelakis, CEO, Integration Technologies Group, Inc.

Purpose-Built

Designed for NIST SP 800-171 Rev 2 and CMMC Level 2

Not a repurposed commercial product

Independently Validated

Assessed by an authorized C3PAO

The assessed environment is the one customers receive

Operationally Sustainable

Annual control audits built into ITG’s managed service

SSP kept matched to the live environment

Cyber AB CMMC Registered Practitioner Organization (RPO) badge

Integration Technologies Group, Inc. (ITG) is a Cyber AB Registered Practitioner Organization (RPO), listed on the Cyber AB Marketplace.


Why choose ITG for SENTRE?

Proven in Our Own Operations

We implemented and validated SENTRE in our own operations first. When we say it works, we mean it has passed an independent assessment, so you start from an environment with a verified track record.

One Vendor, Full Accountability

Unlike fragmented or advisory-only offerings, ITG delivers the technology, the documentation, the managed services and the compliance expertise under one roof. The Shared Responsibility Matrix states who is responsible for each requirement.

Built for the Long Haul

Compliance is not a one-time event. ITG’s managed service keeps your SSP current, your controls audited annually and your enclave aligned with evolving NIST guidance, so you are ready for the next assessment.

We Align SENTRE with Your Mission

SENTRE is not a product we sell and walk away from. It is a managed CUI enclave: ITG installs it, trains your team and manages it alongside you, while your team does its CUI work inside it. Every engagement starts with Discovery, so the enclave fits how you work.


Questions about ITG

Is ITG a C3PAO?

No. ITG is a Cyber AB Registered Practitioner Organization (RPO) and holds its own CMMC Final Level 2 (C3PAO) status. An independent, authorized C3PAO assessed ITG on December 16, 2025. ITG does not assess other companies, and it does not assess organizations it has helped prepare.

Does ITG’s certification cover our company?

No. ITG’s CMMC status covers ITG’s own enterprise. Your status comes from your own self-assessment and annual affirmation or, where a contract requires it, your own C3PAO assessment. What SENTRE gives you is the environment and documentation that ITG’s assessment was based on.

How long did ITG’s own build take?

More than 10 months, with 4 dedicated IT and business consultants and 5 part-time staff. That covered building the environment, implementing all 110 NIST SP 800-171 requirements, updating ITG’s SPRS record and passing the C3PAO assessment. Customers start from the finished environment instead of repeating that work.

Is SENTRE the environment ITG was assessed on?

It is built from the same design, documentation and operating model the C3PAO assessed at ITG, enterprise scope. Each customer enclave is adapted to each customer’s contracts, systems and placement during implementation, and ITG manages it after go-live, while the customer’s team does its CUI work inside it.

How long has ITG served federal customers?

ITG was founded in 1984 and has delivered IT infrastructure, lifecycle services and compliance-driven solutions to federal agencies and their contractors since then. Its quality, information security and IT service systems are certified to ISO standards, listed in the credentials table above.

Talk to ITG about how SENTRE would work for your contracts, your systems and your team. Discovery is a no-obligation fit and integration review.