CMMC Level 2.0 Sub-Tier Exposure Assessment

Where your supply base stands before CMMC Phase 2 and beyond. Thirteen questions on the risk your sub-tier carries into your programs.

This assessment needs JavaScript, which is disabled or blocked in this frame. Open the tool directly in a new tab, or ask your site administrator to allow scripts for this page.

Phase 2 was scheduled to begin on Nov 10, 2026. Its implementation date has been pushed back six months. It's Fathom's expectation that it will become the standard on applicable CUI contracts. Also, the rigor it enforces on our business is a valuable exercise that pays value well beyond future DoD compliance. That's why we're continuing to work toward CMMC Level 2 assessments for several of our facilities.