ECK Receives CMMC Level 2 Certification

Eck Industries, Inc., proudly announces its achievement of Cybersecurity Maturity Model Certification (CMMC) Level 2. This milestone reinforces the company’s unwavering commitment to protecting sensitive defense information and upholding the highest security standards in the manufacturing sector.

The CMMC framework, developed by the U.S. Department of Defense (DoD), is designed to enhance cybersecurity across the defense industrial base. By achieving Level 2 certification, Eck Industries, who embarked on the process nearly two years ago, has demonstrated its compliance with rigorous security controls, ensuring the protection of Controlled Unclassified Information (CUI) in federal contracting environments. CMMC Level 2 certifications are awarded to organizations that address 110 security controls mapped to 320 assessment objectives based on the NIST SP 800-171 framework. In collaboration with Redspin, a CMMC 3rd Party Assessment Organization (C3PAO), the Eck team established a robust System Security Plan (SSP) encompassing over 1,000 pages of documentation, policies, and security controls.

“Attaining CMMC Level 2 certification is a significant achievement for Eck Industries and underscores our dedication to cybersecurity excellence,” said Kiley Eck Hayon, President of Eck Industries. “As a trusted partner in the defense supply chain, we recognize the critical importance of safeguarding sensitive data and maintaining the integrity of national security initiatives.”

Eck Industries’ successful certification process involved a comprehensive evaluation of its cybersecurity policies, procedures, and technical implementations. The company has integrated advanced security measures to mitigate cyber threats, safeguard customer information, and ensure compliance with evolving regulatory requirements.

“Passing our CMMC assessment with top marks just 20 days after the new rules took effect puts us well ahead in the industry,” said Tyler Eck, VP Sales & Engineering. “This certification is not a one-time achievement; it’s an ongoing commitment to our clients’ and our nation’s data and assets.”

View Certificate