# RegScale Achieves CMMC Level 2 Certification

RegScale reports achieving CMMC Level 2 certification by meeting all 110 requirements across 14 domains with no POA&M items. The company says its continuous controls monitoring platform supported ongoing evidence collection and that preparation and assessment took 28 hours, compared with the Department of War’s modeled 286 hours for a small entity. This is a vendor-reported case study, not a contract award or solicitation; the source also notes RegScale continued its certification effort during a pause in CMMC Phase 2 implementation.

- For contractors preparing for CMMC assessments, the case illustrates how continuous evidence collection may help organize compliance work and reduce assessment preparation effort; the reported time comparison is RegScale’s, not a general benchmark.
- Procurement and security teams can use the example to evaluate whether continuous controls monitoring supports their evidence-management and assessment workflows, while recognizing that the report does not establish certification outcomes for other organizations.
- The reported Phase 2 pause is relevant to contractors planning certification activity, but this signal provides no new solicitation, contract opportunity, or specific deadline.

**Jurisdictions:** federal
**Industries:** Defense & Military, Information Technology
**Topics:** Cybersecurity, Regulatory Compliance
**Published:** October 19, 2026

### Government Entities
- Department of War (DoW)

### Vendors
- RegScale (Continuous controls monitoring platform provider and CMMC Level 2 certification holder)
- A-LIGN (Independent CMMC assessment organization)

### Sources
- [Continuous controls monitoring can connect security operations, evidence & compliance in one ongoing process. Dale Hoak, RegScale CISO, shares how this approach helped @RegScale earn CMMC Level 2 with 110 of 110 requirements met and zero POA&M items: https://t.co/hfq6UuVw](https://x.com/Carahsoft/status/2112242487515357348) - twitter-govtech