If you handle Controlled Unclassified Information (CUI), CMMC Level 2 requirements aligned to NIST SP 800-171 are already appearing in DoD contracts. Certification is not just a compliance exercise. It directly impacts contract eligibility under DFARS requirements. Preparing for Level 2 assessments requires aligning technical controls across your DevSecOps environment, including how Salesforce changes are managed, deployed, monitored and audited.

 

In this session, Jim Novakoff, Founder of CMMCSecureCloud, explained:

• What CMMC 2.0 Level 2 requires from a technical control perspective
• How NIST SP 800-171 Revision 2 impacts Salesforce development processes
• Why DevSecOps pipelines are now part of your compliance boundary
• What assessors evaluate during C3PAO reviews