Prometheus Security Group Global (PSG) has achieved Cybersecurity Maturity Model Certification (CMMC) Level 2, demonstrating the company’s compliance with Department of Defense cybersecurity requirements for protecting Controlled Unclassified Information (CUI).

CMMC Level 2 requires organizations to implement the security requirements of NIST SP 800-171 for safeguarding CUI. PSG said the certification marks an important milestone in supporting Department of Defense customers, federal agencies, systems integrators and defense industrial base partners that require secure and compliant technology partners.

“Achieving CMMC Level 2 is more than a compliance milestone — it validates the significant work we’ve done to strengthen our cybersecurity practices and protect sensitive information,” said Daniel Griego, CISSP, Senior Manager, Cyber Architecture & Compliance. “It demonstrates that the same rigorous security principles we advocate for our customers are embedded within our own operations.”

The certification also reinforces PSG’s broader commitment to Zero Trust, according to the company.

“We develop technology designed to establish and maintain trust from the far edge to the enterprise, and we hold our own operations to that same high standard,” said Jeremy Freeze-Skret, Vice President of PSG Global. “This certification further demonstrates to our government and industry partners that security isn’t simply something we build into our products — it’s fundamental to how PSG operates.”

PSG has experience developing Zero Trust technologies for physical security and mission-critical environments. Its patented technology architecture is designed to extend trust to the far edge by establishing device identity, authenticating communications and verifying data where it is created before the information is used by downstream security, operational and enterprise systems.

To prepare for CMMC Level 2, PSG strengthened internal cybersecurity controls, enhanced auditing and documentation processes and completed the required third-party assessment.

The company said the certification further positions it to support organizations across the defense industrial base as cybersecurity and supply-chain requirements continue to evolve.