T-Rex Solutions Achieves CMMC Level 2 Certification

Independent C3PAO assessment validates T-Rex’s protection of Controlled Unclassified Information and positions T-Rex to support Department of War programs requiring certified cybersecurity

T-Rex Solutions, LLC (T-Rex), a federal contractor supporting the Department of War, Intelligence Community, and Federal Civilian agencies, today announced that it has achieved Cybersecurity Maturity Model Certification (CMMC) Level 2 (C3PAO) status following a formal assessment by an authorized Certified Third-Party Assessment Organization. The certification confirms that T-Rex’s information systems and practices meet the Department of War’s (DoW) requirements for safeguarding Controlled Unclassified Information (CUI), as defined by the 110 security requirements of NIST SP 800-171.

The certification is the result of a sustained, company-wide effort spanning more than five years. T-Rex’s information technology, information security, compliance, and operations teams worked together to document, implement, and validate the security controls required under NIST SP 800-171 and the CMMC program.

“Achieving CMMC Level 2 external certification gives our government customers and industry partners independent proof that their sensitive program data is protected to the Department of War’s standard. Security isn’t a checkbox for us — it’s how we operate every day,” said Marc Steining, COO of T-Rex. This achievement emphasizes T-Rex’s unwavering commitment to information security, process maturity, and continuous improvement in support of customers’ missions evidenced through its ISO 27001, ISO 20000, ISO 9001, CMMI Development Level 3, and CMMI Services Level 3 certifications.

As the DoW and its industrial base place growing weight on independently verified compliance over self-attestation, third-party certification has become a key factor in contract awards and teaming decisions. With certification in hand, T-Rex is positioned to compete for and support a broader range of contracts involving CUI, reducing risk for its customers and prime contractor partners.

Beyond meeting contractual requirements, the certification reflects the maturity of T-Rex’s internal security practices. It reduces exposure to cyber risk and gives clients greater confidence in how T-Rex handles sensitive information. T-Rex joins a still-limited group of defense industrial base companies that have completed a C3PAO Level 2 assessment.

About T-Rex
T-Rex is a leading IT solutions provider helping the Federal government modernize, protect, and scale its systems and data efficiently and effectively. Providing transparency in all our processes, T-Rex has designed, built, integrated, and operated some of the world’s largest critical systems for the Federal government. We take pride in relentlessly innovating to improve government performance and drive government efficiency. T-Rex has technical expertise in Cloud Adoption, Cybersecurity, Data Engineering, Agile Transformation, Customer Experience, and Health IT.