While 95% of organizations actively pursuing CMMC 2.0 certification track some governance tracking effectiveness metrics, only 38% have instituted comprehensive governance control and tracking systems.

September 9, 2025

While 95% of organizations actively pursuing CMMC 2.0 certification track some governance tracking effectiveness metrics, only 38% have instituted comprehensive governance control and tracking systems. — This cybersecurity statistic was published by Kiteworks in September 2025. It covers topics including Defense, Governance, Governance tracking. The original data appears in Blind Spots Exposed: Navigating AI, Third-Party Risks, and Compliance in 2025 . For the full methodology and detailed findings, refer to the original report.

Source

View Original Report

Published on 9/9/2025

Share or Copy this stat

Frequently Asked Questions

What does this statistic say?

While 95% of organizations actively pursuing CMMC 2.0 certification track some governance tracking effectiveness metrics, only 38% have instituted comprehensive governance control and tracking systems. This data was published by Kiteworks and covers Defense, Governance, Governance tracking.

Where does this data come from?

This statistic comes from Blind Spots Exposed: Navigating AI, Third-Party Risks, and Compliance in 2025 , published by Kiteworks on September 9, 2025. You can view the original report at https://www.kiteworks.com/data-security-compliance-risk-annual-report/.

What cybersecurity topics does this cover?

This statistic relates to Defense, Governance, Governance tracking. Browse more statistics on Defense or from Kiteworks.

CYBERSTATS

While 95% of organizations actively pursuing CMMC 2.0 certification track some governance tracking effectiveness metrics, only 38% have instituted comprehensive governance control and tracking systems.

Source

Share or Copy this stat

Frequently Asked Questions

Want More Statistics Like This?

Related Statistics

78% of security leaders in government, defense, and critical services cite outdated infrastructure as a primary source of cyber vulnerability.

49% of security leaders in government, defense, and critical services cite ensuring data integrity and preventing tampering in transit as their single biggest challenge when transferring information across classified or coalition networks.

45% of security leaders in government, defense, and critical services cite managing identity and authentication across multiple domains as the biggest challenge to securing access to mission data.

11% of organizations actively pursuing CMMC 2.0 certification are in Europe.

59% of mid-market firms (5,000-9,999 employees) actively pursuing CMMC 2.0 certification achieve top-tier encryption (76-100% coverage).

Only 56% of organizations have fully implemented end-to-end encryption for all sensitive data.

Browse by Topic

Stay Ahead of Cyber Threats