ATC Manufacturing Earns Perfect Score in CMMC Level 2 Certification, Joining ~3% of Contractors Certified to Handle CUI
ATC Defense and Commercial Customers Can Count on Verified Protection of Sensitive Technical and Program Data
Press Release / Website Announcement
FOR IMMEDIATE RELEASE
ATC Manufacturing, a Post Falls, Idaho-based manufacturer for the aerospace and defense industries, has achieved Cybersecurity Maturity Model Certification (CMMC) Level 2 with a perfect score, placing ATC among only 2,105 defense contractors (roughly 3%) certified to handle Controlled Unclassified Information (CUI) as of August 2026. ATC specializes in advanced thermoplastic composite parts for defense aerospace applications, providing faster to produce, lighter, and lower-cost composite parts than traditional thermoset composites and legacy materials.
For ATC’s customers, that means verified protection for the technical drawings, program specifications, and other sensitive program data they share with ATC. The certification confirms ATC’s cybersecurity controls were independently evaluated against all 110 CMMC Level 2 practices and found fully compliant, with no gaps including network access, employee training, incident response, and data handling.
The certification follows a formal third-party assessment by A-LIGN, a leading C3PAO trusted by more than 6,400 organizations worldwide, with implementation support from Redspin, ATC’s managed security services partner.
“Our certification and perfect score are confirmation of work we started years ago. Our customers have trusted us with their most sensitive program data since long before CMMC existed, and this certification is independent proof that trust was well placed,” said Pat Jones, President, ATC Manufacturing.
Cybersecurity Maturity Model Certification (CMMC) is a U.S. Department of War (DoW) program that verifies, through independent assessment, that a contractor’s cybersecurity controls adequately protect CUI on Defense Industrial Base systems and networks.
“Congratulations to ATC Manufacturing for achieving CMMC Level 2 certification. This accomplishment demonstrates a strong commitment to safeguarding valuable information to protect our nation, developing a competitive advantage, and creating a culture of security,” said Petar Besalev, EVP of Compliance and Cybersecurity Services at A-LIGN.
“CMMC Level 2 exists to confirm contractors are actually protecting the sensitive data they’re trusted with, not just claiming to. ATC’s results speak for themselves, and we’re glad to have been part of getting them there,” said Brian McManamon, President at Redspin.
ATC continues to grow its footprint in the defense and aerospace supply chain. The company now has more than a million parts flying today across defense and commercial programs, broke ground in August on a 57,635-square-foot expansion of its Post Falls facility, and recently secured a contract award from the Air Force Research Laboratory (AFRL) for large-scale, high-rate thermoplastic composite aircraft structures.
ATC continues to hire at its Post Falls, Idaho location including through its SkillBridge partnership, which gives transitioning service members hands-on training and a career pathway into its manufacturing workforce. See current openings: https://atcmanufacturing.com/careers/
——–
For media inquiries: [email protected]
About Advanced Thermoplastic Composites (ATC) Manufacturing
ATC is committed to advancing composites manufacturing and retaining American manufacturing jobs by providing low-cost solutions for lean thermoplastic composite part production at their purpose-built facility in Post Falls, Idaho. ATC is one of the few remaining independent thermoplastic composite suppliers, and maintains ISO 9001:2015, AS9100D, ITAR and NADCAP certifications. Visit ATC’s website for more information.
About Redspin
Redspin, helps federal agencies and Defense Industrial Base (DIB) organizations strengthen cyber resilience, defend Controlled Unclassified Information (CUI), and meet the cybersecurity requirements of NIST SP 800-171 and DFARS 252.204-7012. As a trusted managed security and compliance partner, we provide cybersecurity consulting, migration, management, and ongoing 24/7 threat detection across GCC High, on-prem, and hybrid cloud environments. Redspin is the long-standing leader for all things CMMC, training, certification, and is a trusted ESP. We help reduce cyber risk, strengthen resilience, and protect the sensitive information critical to national security. To learn more, visit www.redspin.com.
A-LIGN is the leading cybersecurity compliance partner, trusted by over 6,400 organizations worldwide to navigate the complexities of compliance, audit, and risk. A-LIGN has completed more than 36,000 audits and is the #1 issuer of SOC 2 reports and a top three FedRAMP assessor. Learn more at a-lign.com.

