Jacksonville, North Carolina, is inseparable from Marine Corps Base Camp Lejeune. Located in Onslow County along the southeastern North Carolina coast, Jacksonville is a city whose economy, culture, and identity revolve around one of the most strategically important military installations in the United States. Camp Lejeune spans over 156,000 acres and serves as the home base for II Marine Expeditionary Force, 2nd Marine Division, 2nd Marine Logistics Group, and Marine Corps Installations East. Across the New River, Marine Corps Air Station New River provides rotary-wing aviation support with squadrons of MV-22 Ospreys, CH-53E Super Stallions, and AH-1Z Vipers. Together, these installations house more than 47,000 active-duty Marines and sailors, plus tens of thousands of family members and civilian employees.

This concentration of Marine Corps combat power generates a substantial defense contractor ecosystem throughout the Jacksonville metropolitan area. Companies along Marine Boulevard, Lejeune Boulevard, and the Western Boulevard commercial corridor provide training and simulation, logistics management, vehicle and equipment maintenance, IT infrastructure support, facilities management, environmental remediation, and professional services to Camp Lejeune commands. Many of these contractors handle Controlled Unclassified Information as part of their daily operations — technical manuals for weapons systems, maintenance records for military vehicles, personnel data, training documentation, and operational planning materials that the Department of Defense designates as sensitive but unclassified.

The Cybersecurity Maturity Model Certification program fundamentally changes how these contractors must approach information security. Under CMMC 2.0, which the DoD finalized in late 2024 with phased implementation underway, defense contractors handling CUI must achieve CMMC Level 2 certification — verified by an independent Certified Third-Party Assessment Organization — before they can compete for or renew contracts. Level 2 maps directly to the 110 security controls in NIST Special Publication 800-171, covering access control, audit and accountability, configuration management, incident response, system integrity, and eleven other control families.

For Jacksonville’s defense contractor community, the consequences of failing to achieve CMMC certification are severe. A contractor without the required certification level cannot bid on new contracts, and existing contracts will have CMMC requirements added at option renewal. In a city where Camp Lejeune spending is the primary economic engine, losing contract eligibility threatens the survival of businesses that have served the Marine Corps for decades. Many small and mid-sized contractors in Jacksonville have operated under self-attestation for years, reporting SPRS scores based on their own NIST 800-171 assessments. CMMC replaces that self-assessment model with independent verification, and the gap between current practices and required standards is often significant.

Petronella Technology Group, Inc. brings over two decades of CMMC compliance expertise to Jacksonville’s defense contractors. Craig Petronella, our founder, holds the CMMC Registered Practitioner credential from the Cyber AB, and our team specializes in the practical, hands-on compliance work that Marine Corps contractors need. We understand that Jacksonville contractors range from 10-person training companies to 300-person logistics operations, and we tailor our approach accordingly. Our cybersecurity consulting services in Jacksonville complement our CMMC program, while our managed IT services provide the ongoing infrastructure management that maintains compliance between assessments.

Whether you are a maintenance contractor supporting Camp Lejeune vehicle depots, a training company providing simulation services to II MEF units, or an IT integrator managing network infrastructure for Marine Corps Installations East, Petronella Technology Group, Inc. delivers the CMMC compliance program your organization needs. We also work with contractors in neighboring military communities — our CMMC compliance services in Goldsboro serve the Seymour Johnson AFB ecosystem, and our Fayetteville CMMC program supports Fort Liberty contractors. Our IT for defense contractors practice provides comprehensive technology support across the defense industrial base.

The Jacksonville-Onslow County metropolitan area represents one of the most Marine Corps-dependent contractor markets in the United States. Camp Lejeune’s annual economic impact exceeds $6 billion, and hundreds of local businesses exist solely to support the installation and its tenant commands. The CMMC mandate affects this ecosystem disproportionately because many Jacksonville contractors are small businesses that grew organically to serve Camp Lejeune’s needs without building enterprise-grade cybersecurity programs.

These companies face a specific challenge: they must implement the same 110 NIST 800-171 controls required of defense contractors with dedicated security operations centers and million-dollar IT budgets. A 20-person maintenance company on Lejeune Boulevard handling technical manuals for MRAP vehicles faces the same CMMC Level 2 requirements as a 500-person defense prime. The difference is resources — and that is precisely where Petronella Technology Group, Inc. bridges the gap.

Camp Lejeune contractors also face unique CUI challenges related to Marine Corps operations. Technical data for amphibious assault vehicles, maintenance procedures for rotary-wing aircraft at MCAS New River, logistics coordination for expeditionary force deployments, and personnel records for special operations units all constitute CUI that must be protected according to CMMC standards. Our team understands these data flows and builds compliance programs that address the specific CUI categories Jacksonville contractors handle.

We also recognize that Jacksonville’s contractor community is interconnected. Prime contractors frequently subcontract to smaller local firms, and DFARS flow-down requirements mean subcontractors need the same CMMC certification level for the CUI they handle. Our program addresses these supply chain dynamics, helping both primes and subs achieve compliance. When you need additional capabilities, our penetration testing services validate your security controls, and our vCISO program provides the strategic security leadership that growing contractors require.