PKF O’Connor Davies is proud to be a fully authorized CMMC Third Party Assessment Organization (C3PAO), approved by the CyberAB and the U.S. Department of Defense (DoD). This status allows us to perform CMMC Level 2 certification assessments for contractors and subcontractors within the defense industrial base. We help organizations demonstrate compliance with the Cybersecurity Maturity Model Certification (CMMC) framework and safeguard Controlled Unclassified Information (CUI) across their systems. Nick DeLena, Partner, shares his insights into what it means to be a C3PAO and how we can help organizations prepare for CMMC assessments in the video below.
What Is a C3PAO?
C3PAOs are firms approved to conduct official assessments against the CMMC Level 2 standard, validating a contractor’s implementation of crucial cybersecurity controls. Certification is required under 48 CFR 7021 for handling CUI as part of DoD contracts.
As a C3PAO, PKF O’Connor Davies can evaluate your environment, score your compliance, and issue certification — enabling your continued eligibility for DoD contracts.
What to Expect from the CMMC Level 2 Certification Process
We bring a proven, disciplined approach to every certification:
- Pre-engagement scoping and readiness validation
- Formal review of 110 security practices and 320 assessment objectives aligned with NIST 800-171 revision 2
- Objective, independent assessment team
- Clear reporting and guidance on next steps
Note: Certification services are separate and distinct from readiness advisory services to comply with CMMC conflict-of-interest rules.
Why Choose PKF O’Connor Davies as Your CMMC Provider?
We have a long history providing services like penetration testing, digital forensic services, cybersecurity risk assessments and virtual Chief Information Security Officer services to the defense sector. As of 2025, we received a perfect score on our own DIBCAC assessment and PKF O’Connor Davies is now authorized by CyberAB & DoD to conduct CMMC Level 2 certifications.
Looking to Get CMMC Level 2 Certified?
Our dedicated team has deep experience with the defense supply chain and are well-versed in NIST, CMMC and more. We’ve supported contractors through the full lifecycle of CMMC — from initial planning to successful certification. Let us help you navigate your CMMC Level 2 certification. Contact us today to schedule a scoping discussion.