Juneau's Goldbelt says it achieved CMMC Level 2 cybersecurity status

Goldbelt Inc., the Juneau-based Alaska Native corporation, said Wednesday it achieved Level 2 of the Defense Department's Cybersecurity Maturity Model Certification (CMMC), strengthening its ability to pursue federal work involving Controlled Unclassified Information, the category of government information that law, regulation or policy requires to be safeguarded. The corporation, which represents more than 4,000 shareholders, says federal growth creates long-term value for owners.

Level 2 rests on 110 security requirements set out in National Institute of Standards and Technology standard SP 800-171. Contractors are reassessed every three years, either through self-assessment or by an authorized third party, depending on the solicitation, the Defense Department says. Goldbelt did not say which method it used. Starting Nov. 10, the department intends to require third-party assessment for applicable Level 2 contracts.

"Our customers rely on us to protect sensitive information, and our disciplined security practices allow us to better support the mission-critical work of our country while creating value for our shareholders," President and CEO McHugh Pierre said.