CMMC 2.0 Is Here: Aligning Salesforce DevSecOps to Level 2 and Federal Security Requirements

If you handle Controlled Unclassified Information (CUI), CMMC Level 2 requirements aligned to NIST SP 800-171 are already appearing in DoD contracts. Certification is not just a compliance exercise. It directly impacts contract eligibility under DFARS requirements. Preparing for Level 2 assessments requires aligning technical controls across your DevSecOps environment, including how Salesforce changes are managed, deployed, monitored and audited. 

In this session, Jim Novakoff, Founder of CMMCSecureCloud, explains:

• What CMMC 2.0 Level 2 requires from a technical control perspective
• How NIST SP 800-171 Revision 2 impacts Salesforce development processes
• Why DevSecOps pipelines are now part of your compliance boundary
• What assessors evaluate during C3PAO reviews