GSA MAS – 47QTCA18D0035 (Prime)

Charles F. Day & Associates (CFDay) is preparing for a CMMC Level 2 third-party assessment at the end of March, conducted by an accredited C3PAO, to support secure performance on mission-critical work and ensure full alignment with DoD cybersecurity requirements for safeguarding Controlled Unclassified Information (CUI).

As the CMMC DFARS final rule — effective November 10, 2025 — continues its phased implementation across DoD solicitations and contracts, CFDay is committed to maintaining uninterrupted contract eligibility and compliance readiness for our clients and teaming partners.

CFDay's CMMC Level 2 readiness reflects a long-standing culture of disciplined, auditable practice, built on:

• NIST SP 800-171–aligned controls for safeguarding CUI
• ISO 27001 information security management
• ISO 9001 quality management
• CMMI® Service ML 5 and Development ML 3, supported by five CMMI-certified practitioners

CMMC Level 2 certification is the natural next step in CFDay's commitment to operational excellence and mission security.

For questions about our cybersecurity posture or teaming opportunities, please contact us at cfdayinfo@cfday.net .