CyberSheath Secures CMMC Level 2 Certification for Tunnell Consulting with Targeted Enclave Approach
Event summary
- CyberSheath helped Tunnell Consulting achieve CMMC Level 2 certification with a perfect 110 score using a targeted Azure Virtual Desktop enclave in Microsoft’s GCC.
- Tunnell Consulting, a consulting firm with limited CUI exposure, avoided enterprise-wide compliance costs by scoping controls to actual CUI flow.
- The certification was achieved ahead of the Phase 2 CMMC deadline on November 10, 2026.
- CyberSheath’s approach reduced long-term operational burden and unnecessary control costs.
The big picture
As defense spending grows and CMMC requirements expand, contractors are seeking cost-effective compliance solutions. CyberSheath’s success with Tunnell Consulting highlights a strategic shift toward precision scoping over enterprise-wide remediation. This approach could set a new standard for companies with limited CUI exposure, reducing unnecessary compliance costs while maintaining security.
What we're watching
- Compliance Efficiency
- Whether CyberSheath’s targeted enclave approach can be replicated across other defense contractors with minimal CUI exposure.
- Market Adoption
- The pace at which defense contractors adopt right-sized compliance solutions ahead of the November 2026 CMMC deadline.
- Regulatory Impact
- How Phase 2 CMMC requirements will shape the defense industrial base’s cybersecurity strategies.
Our editorial coverage: