CMMC Level II C3PAO

Greetings all! It sure has been a while since my last post. Yes, Boarhog's still cranking away after 14 years narrowly focused on providing cleared and credentialed Systems Engineering and Technical Assistance (SETA) and Engineering Support Services (ESS) to our Maritime Industrial Base (MIB) clients and U.S. Navy customers. We've slowly but methodically grown to 40 exceptional associates in 6 states. We still don't have an organization chart, nor do we have a president, vice president, or even supervisors. Nobody with Boarhog makes a living watching other associates do work. We have two Directors now, but both are delivering direct contract hours to U.S. Navy customers while simultaneously performing their overhead duties. A ton of work, but they're both superstars.  We're still SDVO and HUBZone certified by the SBA. 

This post is to announce that this week we finished up the active Phase 2 engagement portion of our C3PAO certification for CMMC Level II.  If I understand the process, (that's a big "if"), our assessor has disengaged from Boarhog to perform QA on their determinations and that might take 10 days, or so I'm told.  We'll learn of our grade at some point, but we do feel confident that we didn't fail outright since we didn't experience any -5 point hit on a control that can't be addressed in a POA&M, as that would have ended the assessment with a failure grade then and there.  I think we're good to go, and if so we'll likely make the November 10th deadline for C3PAO certification.  It'll be a differentiator until such time that everyone handling CUI is C3PAO, but indications are that won't be for some time.  There are many thousands of companies who require a C3PAO certification but currently there are less than a couple hundred companies certified by the government to be C3PAO assessors.  

For those of you who will need a C3PAO but have yet to prepare and then contract with an independent third party assessor, time is running out.  I signed our Master Solutions Agreement with our assessor on January 9th 2026, about half a year ago. I'm not asserting it always takes this long to complete the C3PAO, but it took us that long. 

Take care, be well, and good luck!