Granite Achieves Cybersecurity Maturity Model Certification (CMMC) Level 2
Rhea-AI Impact
(Neutral)
Rhea-AI Sentiment
(Very Positive)
Tags
Key Terms
cybersecurity maturity model certificationregulatory
A cybersecurity maturity model certification is a formal, graded assessment that shows how well an organization protects its digital systems and data, based on a set of defined practices and processes. For investors it matters because the certification signals lower breach and compliance risk—similar to a building passing a safety inspection—and can affect a company’s ability to win contracts, avoid fines, and preserve reputation, all of which influence future revenue and valuation.
cmmc level 2regulatory
CMMC Level 2 is a U.S. government cybersecurity certification that requires companies to adopt a set of documented practices and processes to protect sensitive but unclassified information; Level 2 is the intermediate step between basic cyber hygiene and the highest, most stringent controls. For investors, achieving Level 2 is a practical signal that a company can compete for certain government contracts, reduce the chance of costly data breaches, and demonstrate disciplined risk management—think of it as upgrading from a basic door lock to a keypad plus alarm system for corporate data.
controlled unclassified informationregulatory
Controlled unclassified information (CUI) is government or contract-related material that is not a classified secret but still requires restricted handling, storage, and sharing. Think of it as a sensitive file in a locked cabinet: it isn’t top secret, but mishandling can lead to legal, contractual, or reputational harm. For investors, CUI matters because failures to protect it can trigger fines, lost contracts, and increased compliance risk that may affect a company’s value.
WATSONVILLE, Calif.--(BUSINESS WIRE)--
Granite (NYSE:GVA) announced today that the company has achieved Cybersecurity Maturity Model Certification (CMMC) Level 2. This milestone enhances Granite’s ability to serve federal clients and protect sensitive government data. The CMMC program is currently undergoing a phased rollout, with many new federal contracts requiring CMMC as of November 10, 2025. By October 31, 2026, all Department of War contracts will require the appropriate CMMC certificate. To date, Granite is one of fewer than 500 of the federal government’s anticipated 80,000 firms to have successfully acquired the CMMC Level 2 certification.
The CMMC framework requires government contractors to certify their cybersecurity practices. In a recent assessment, Granite achieved an almost impossible perfect score, successfully passing all 110 security requirements and meeting 320 assessment objectives.
“Our performance on the assessment is a remarkable accomplishment,” explains Granite Chief Technology Officer, Malcolm Jack. “Our Federal and Cybersecurity teams have invested and worked diligently over the last two years to align our infrastructure, policies, and training with the CMMC framework.”
CMMC Level 2 is especially critical for infrastructure contractors like Granite, as it is required for organizations that work on federal projects to handle Controlled Unclassified Information. By meeting these rigorous government standards, Granite can continue bidding on high-value federal contracts.
“Level 2 is a transformative milestone for Granite,” adds Granite Vice President of Federal Operations, Curt Haldeman. “We are ahead of the curve and ready to tackle CMMC contracts for our federal clients and partners. Thanks to the team for their dedication in pursuing this achievement.”
About Granite
Granite is America’s Infrastructure Company™. Incorporated since 1922, Granite (NYSE:GVA) is one of the largest diversified construction and construction materials companies in the United States as well as a full-suite civil construction provider. Granite’s Code of Conduct and strong Core Values guide the Company and its employees to uphold the highest ethical standards. Granite is an industry leader in safety and an award-winning firm in quality and sustainability. For more information, visit the Granite website, graniteconstruction.com, and connect with Granite on LinkedIn, X, Facebook, and Instagram.
