Morningstar Cybersec Investments Becomes First Accredited CMMC C3PAO
Article Content
- •Cybersec Investments is the first accredited CMMC C3PAO, achieving ISO/IEC 17020:2012.
- •The accreditation enhances the reliability of CMMC assessments for DoW contractors.
- •This milestone sets a new benchmark for quality and operational excellence in cybersecurity.
Cybersec Investments LLC has achieved ISO/IEC 17020:2012 Accreditation, becoming the first accredited CMMC Third-Party Assessment Organization (C3PAO). This accreditation is crucial for organizations seeking CMMC certification, particularly within the Defense Industrial Base (DIB). The ISO/IEC 17020:2012 standard ensures that Cybersec operates with integrity and technical proficiency in its assessments. This proactive achievement positions Cybersec Investments to assist Department of War (DoW) contractors in navigating CMMC compliance effectively. The accreditation process validates the company's quality management system and enhances the reliability of their evaluations. Fernando Machado, Managing Principal & CISO, emphasized the importance of this milestone in setting a new benchmark for quality in CMMC assessments. The company is now officially recognized to provide CMMC assessments across the DIB, reinforcing its commitment to cybersecurity standards and national security.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (3)
Continue Reading
Critical Zero-Day Exploited in BeyondTrust Remote Support by China-linked Group A critical vulnerability in BeyondTrust Remote Support, tracked as CVE-2026-102764 with a CVSS score of 9.3, has been exploited by the China-linked espionage group Armory Castle since August 29, 2026. This flaw allows unauthenticated remote attackers to perform file operations, gaining root control and access to…
CISA Warns of Exploited Vulnerabilities in ProFTPD, ONLYOFFICE, Strapi, and More The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added five vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, including critical flaws in ProFTPD, ONLYOFFICE Docs, Strapi, Apache Struts, and ISC BIND. These vulnerabilities are being by Chinese actors for cyber espionage, targeting…