Only 22% of organizations actively pursuing CMMC 2.0 certification implement contractual security requirements with suppliers. This is below the 27% industry average.

September 9, 2025

Only 22% of organizations actively pursuing CMMC 2.0 certification implement contractual security requirements with suppliers. This is below the 27% industry average. — This cybersecurity statistic was published by Kiteworks in September 2025. It covers topics including Defense, CMMC 2.0. The original data appears in Blind Spots Exposed: Navigating AI, Third-Party Risks, and Compliance in 2025 . For the full methodology and detailed findings, refer to the original report.

Source

View Original Report

Published on 9/9/2025

Share or Copy this stat

Frequently Asked Questions

What does this statistic say?

Only 22% of organizations actively pursuing CMMC 2.0 certification implement contractual security requirements with suppliers. This is below the 27% industry average. This data was published by Kiteworks and covers Defense, CMMC 2.0.

Where does this data come from?

This statistic comes from Blind Spots Exposed: Navigating AI, Third-Party Risks, and Compliance in 2025 , published by Kiteworks on September 9, 2025. You can view the original report at https://www.kiteworks.com/data-security-compliance-risk-annual-report/.

What cybersecurity topics does this cover?

This statistic relates to Defense, CMMC 2.0. Browse more statistics on Defense or from Kiteworks.

CYBERSTATS

Only 22% of organizations actively pursuing CMMC 2.0 certification implement contractual security requirements with suppliers. This is below the 27% industry average.

Source

Share or Copy this stat

Frequently Asked Questions

Want More Statistics Like This?

Related Statistics

78% of security leaders in government, defense, and critical services cite outdated infrastructure as a primary source of cyber vulnerability.

49% of security leaders in government, defense, and critical services cite ensuring data integrity and preventing tampering in transit as their single biggest challenge when transferring information across classified or coalition networks.

45% of security leaders in government, defense, and critical services cite managing identity and authentication across multiple domains as the biggest challenge to securing access to mission data.

11% of organizations actively pursuing CMMC 2.0 certification are in Europe.

59% of mid-market firms (5,000-9,999 employees) actively pursuing CMMC 2.0 certification achieve top-tier encryption (76-100% coverage).

Only 56% of organizations have fully implemented end-to-end encryption for all sensitive data.

Browse by Topic

Stay Ahead of Cyber Threats