Rochester, NY – May 13, 2025 – MWI, Inc., a trusted leader in graphite manufacturing industry, is proud to announce that they have achieved Cybersecurity Maturity Model Certification (CMMC) Level 1 compliance for the United States Department of Defense (DoD). This milestone affirms MWI’s ongoing commitment to protecting sensitive information and upholding the highest standards of cybersecurity across its operations.
The CMMC framework, established by the U.S. Department of Defense (DoD), is designed to enhance the cybersecurity posture of companies within the Defense Industrial Base (DIB). Achieving Level 1 compliance demonstrates MWI’s dedication to implementing essential cybersecurity practices and safeguarding Federal Contract Information (FCI).
CMMC Level 1 focuses on the protection of FCI and includes 17 basic cybersecurity practices derived from Federal Acquisition Regulation (FAR) Clause 52.204-21
MWI, Inc. underwent a rigorous assessment process to ensure compliance with the CMMC Level 1 requirements. This included the implementation of key cybersecurity practices, such as access control, incident response, and system security monitoring.
“Cyber Threats and significant data breaches continue to plague businesses, and cyber criminals are typically one step ahead in their methodology”, says Holly Forman, CFO of MWI, Inc. “We have invested considerable time and resources to proactively ensure that sensitive data is safeguarded from outside threats. The process has been thorough, but we are very proud to be able to highlight our commitment to the continuous improvement of our cybersecurity posture.”
Additionally, MWI, Inc. is proud to announce that it is more than halfway towards achieving CMMC Level 2 compliance. CMMC Level 2, also known as Advanced Cybersecurity, includes additional practices and processes to protect Controlled Unclassified Information (CUI) and requires third-party assessments. Level 2 includes a total of 110 controls to ensure compliance and requires regular auditing by a third party.
MWI, Inc.’s continued commitment to cybersecurity protocols simply reinforces its assurance to their entire customer base, not only the Federal Government. “We understand and appreciate the importance of protecting sensitive information, not simply due to the regulations required by the Federal Government to do business, but we understand the potential costs and impacts of the alternative.”
