# Redspin Earns CMMC Assessor Accreditation

Redspin announced on November 10, 2026, that it earned ISO/IEC 17020:2012 accreditation and became one of the first accredited CMMC Third Party Assessment Organizations (C3PAOs). The accreditation gives Defense Industrial Base contractors handling Controlled Unclassified Information an independently validated option for CMMC assessments as they prepare to demonstrate cybersecurity readiness for Department of Defense work. It is an accreditation milestone, not a contract award or solicitation; the related report also notes that 78.2% of surveyed DIB organizations were continuing Level 2 certification efforts or had already achieved certification despite a temporary pause in Phase 2 rollout.

- Contractors pursuing CMMC Level 2 certification can evaluate Redspin as an accredited assessment option and account for assessor selection in their readiness planning.
- Accreditation provides evidence that an assessor’s processes have been independently evaluated, which may matter to contractors seeking confidence in the certification process for DoD work.
- The reported continuation of Level 2 efforts despite the Phase 2 pause indicates ongoing DIB interest in certification; this announcement does not itself create a new contract opportunity or change compliance deadlines.

**Jurisdictions:** federal
**Industries:** Defense & Military, Information Technology
**Topics:** Cybersecurity, Regulatory Compliance
**Published:** November 12, 2026

### Government Entities
- Department of Defense (DoD)

### Vendors
- Redspin (Accredited C3PAO providing CMMC assessments)

### Key Quotes
> Contractors shouldn't have to take an assessor's word that their end-to-end processes are rigorous, and accreditation means they don't have to.
> — Robert Teague, Vice President, Federal Consulting at Redspin

> CMMC only works if the C3PAOs delivering certifications are trusted, and accreditation is how the ecosystem earns that trust.
> — Thomas Graham, Vice President, Quality Assurance Tech Manager at Redspin

> Every organization that completes this process strengthens confidence in CMMC certifications and raises the bar for other assessors across the DIB.
> — Matthew Travis, Chief Executive Officer of The Cyber AB

### Sources
- [Redspin Meets Stringent Standards to Become One of the First Accredited C3PAOs](https://www.prnewswire.com/news-releases/redspin-meets-stringent-standards-to-become-one-of-the-first-accredited-c3paos-302935457.html) - PR Newswire
- [
		Redspin achieves ISO/IEC 17020 accreditation, becoming an accredited C3PAO for CMMC assessments - Industrial Cyber	](https://industrialcyber.co/news/redspin-achieves-iso-iec-17020-accreditation-becoming-an-accredited-c3pao-for-cmmc-assessments) - Industrial Cyber