Real assessor credentials in-house
CCA, CCP, and RP on staff — the people doing the work hold the credentials the work demands.
About
Level 2 Compliance Solutions is the CMMC team of record for defense industrial base contractors — from small manufacturers to enterprise programs. We provide the in-house expertise. Our partner network delivers the rest. One accountable team, right-sized for the work.
We provide the in-house expertise — assessment, policy, training, and ongoing GRC — and match each client to the right delivery partner for everything else. We're virtual, accountable, and built to make compliance survivable for organizations that have a business to run.
Four principals. Real assessor credentials. A single, accountable team.

GRC Strategy & Executive Leadership
CISM · CMMC CCL, CCA, CCP, RP · CIO & vCISO
Greg is a focused technology and security compliance leader with significant industry experience. As a CMMC Lead CCA, he guides clients through policy and practice creation, gap analysis, and readiness assessments with unmatched expertise.

Infrastructure & Technical Strategy
CCP · IT Director · CIO/CISO (Manufacturing)
David brings decades of IT leadership in manufacturing, specializing in secure infrastructure design and technical control implementation. He helps clients bridge business needs with compliance requirements.

Founder & Advisory Board
Drew provides strategic leadership in sales, business development, and customer experience, helping shape Level 2's approach to client engagement, market positioning, and partner alignment.

Founder & Advisory Board
Paul offers strategic guidance on partnership development, business growth, and channel strategy — strengthening Level 2's ability to cultivate meaningful partnerships and expand its reach within the defense industrial base.
Our principals hold the credentials that matter for CMMC delivery — not just account managers with a checklist.
CCA, CCP, and RP on staff — the people doing the work hold the credentials the work demands.
Structured, predictable engagements scoped to your size — not boilerplate processes built for someone else.
No single MSP, no locked-in stack. We match the partner to the client, not the other way around.
Managed GRC, training, and annual tabletops keep you audit-ready year-round, not just at certification.
A 30–45 minute discovery call is the fastest way to see if we're the right team for your environment, your contracts, and your timeline.
Book a Discovery Call