On December 16, 2025, Integration Technologies Group, Inc. (ITG) achieved CMMC Final Level 2 (C3PAO) status. The assessment was performed by Redspin, an authorized C3PAO, against NIST SP 800-171 Revision 2. ITG met all 110 security requirements, with an enterprise assessment scope covering the entire company.
Certification at a glance
| Status | CMMC Final Level 2 (C3PAO) |
|---|---|
| CMMC Unique Identifier | L200001152 |
| Assessor | Redspin (C3PAO) |
| Standard | NIST SP 800-171 Rev 2 |
| Score | 110 of 110 |
| Assessment date | December 16, 2025 |
| Scope | Enterprise (CAGE 1EJ55) |
| Status valid through | December 15, 2028, with annual affirmations |
Why an enterprise scope matters
Many contractors certify a narrow enclave and keep the rest of the business out of scope. ITG’s assessment covered the whole organization: the people, facilities, systems and processes that handle Controlled Unclassified Information (CUI) for Department of War (DoD) contracts.
How ITG got there
ITG spent more than ten months building the environment, with four dedicated IT and business consultants and five part-time specialists. The work covered all 110 requirements, an updated SPRS score and the C3PAO assessment.
The environment runs entirely on ITG-owned, on-premises servers, with no external cloud services. It includes secure email and communications, plus an ERP covering contracts, projects, supply chain, configuration, incidents, logistics and document management. Only authorized personnel on company-issued, hardened laptops can access it. Staff complete background investigations and CMMC training.
From ITG’s environment to SENTRE
The environment ITG had assessed is now available to other defense contractors as SENTRE, a managed CUI enclave. You own the hardware and software licenses, and your data stays on them. ITG installs the enclave, trains your personnel and provides hardware and software support. ITG personnel have no access to your CUI. A Shared Responsibility Matrix states which requirements ITG supports and which remain with you.
Explore the SENTRE managed CUI enclave
Where CMMC stands today
CMMC requirements in DoW contracts are currently being removed or revised. The NIST SP 800-171 baseline under DFARS 252.204-7012 still applies. See CMMC status after the 2026 class deviation and what DFARS 7012 requires.
Frequently asked questions
What level of CMMC does ITG hold?
CMMC Final Level 2 (C3PAO), assessed December 16, 2025, with a score of 110 of 110.
What did the assessment cover?
ITG’s entire enterprise (CAGE 1EJ55), not a single enclave.
Is SENTRE the same environment that was assessed?
Yes. SENTRE is the environment ITG built for its own contracts and had C3PAO-assessed.
Read the official announcement on itgonline.com.