Littleton, CO – January 8, 2025 – Sherpa 6 Inc., a service-disabled veteran-owned small business (SDVOSB), announced today that it has achieved Cybersecurity Maturity Model Certification (CMMC) Level 2 through an accredited Certified Third-Party Assessor Organization (C3PAO). This milestone reinforces Sherpa 6’s commitment to protecting national defense data and meeting stringent Department of War (DoW) mandates.
The DoW finalized the CMMC program in November 2025, mandating that all defense contractor systems with Controlled Unclassified Information (CUI) are assessed against the extensive cybersecurity controls outlined in National Institute of Standards and Technology Special Publication (NIST SP) 800-171.
Sherpa 6 joins an elite group of fewer than 1% of defense contractors that have successfully completed a C3PAO assessment of the CMMC Level 2 controls with a perfect score, meeting all 320 assessment objectives. Of the estimated 80,000 companies that require CMMC Level 2, Sherpa 6 is one of the first 600 companies to make this achievement.
“Achieving CMMC Level 2 reflects the disciplined approach our team takes toward cybersecurity and risk management,” said Eric Olson, Chief Information Officer. “This certification reinforces our commitment to our customers and partners to protect sensitive information and deliver secure solutions.”
Achieving CMMC Level 2 confirms that Sherpa 6 has implemented and institutionalized robust cybersecurity practices across its systems, personnel, and operational processes. Sherpa 6 views CMMC as part of a continuous improvement process. The company continues to monitor, assess, and enhance its cybersecurity program to ensure long-term compliance and resilience in an evolving threat landscape.
About Sherpa 6, Inc.
Sherpa 6 is a service-disabled, veteran-owned small business (SDVOSB) whose mission is taking the burden off our mission-critical customers by developing advanced solutions that combine technology, ingenuity, and engineering. For more information, visit www.sherpa6.com.
