When does CMMC Level 2 certification become mandatory in contracts?
Level 2 third-party certification phases into DoD solicitations over the rollout that began when the rule took effect 2025-11-10, with the broader Level 2 certification requirement reaching contracts through 2026 under the phased schedule; the exact date for…
Answer.
Level 2 third-party certification phases into DoD solicitations over the rollout that began when the rule took effect 2025-11-10, with the broader Level 2 certification requirement reaching contracts through 2026 under the phased schedule; the exact date for a given award depends on its phase and contracting officer. Check the specific solicitation. Planisphere provides AI-behaviour evidence supporting the underlying 800-171 controls; it does not grant or schedule the certification.
The mark behind the answer.
Cybersecurity Maturity Model · L1 · L2 · L3.
More on CMMC.
Prepare evidence for CMMC review.
First evidence record within 21 days of access · re-runs in a single business day. Planisphere measures model behaviour and emits a reproducible, sha-pinned record — it does not certify, file, or give legal advice.