Press Release
Issued by Duncan Aviation.
July 29, 2026
Duncan Aviation is pleased to announce that it has achieved formal compliance with the DoD (Department of Defense/War) Cybersecurity Maturity Model Certification (CMMC) framework. CMMC is the DoD's data-security rule designed to protect sensitive digital information across all contracts. By passing a third-party audit, Duncan Aviation enters an elite tier of businesses: it is estimated that fewer than 1,500 U.S. companies hold both CMMC compliance and the AS9100 aerospace manufacturing quality standard.
Achieving CMMC means Duncan Aviation is now listed in the federal SAM.gov (System for Award Management) database and is qualified to continue winning, bidding on or partnering on defence contracts in depot-level maintenance, aircraft modifications, and parts manufacturing and repair.
For defence customers, this means working with a partner that has demonstrated its ability to protect sensitive technical information while meeting rigorous aerospace quality standards.
The CMMC certification will have a significant impact on Duncan Aviation's manufacturing division, DMS (Duncan Manufacturing Solutions). While Duncan Aviation is globally recognised for its corporate aircraft MRO (maintenance, repair and overhaul) services, this certification allows DMS to scale up its manufacturing capabilities. Instead of just fabricating one-off replacement parts, the company can now bid on large-scale military assembly-line production.
Over the past several years, the U.S. government has increased requirements to protect CUI (Controlled Unclassified Information). This type of information is commonly used in defence-related manufacturing and includes technical data, drawings and other sensitive customer information.
To address this, the NIST (National Institute of Standards and Technology) developed security standards (NIST 800-171) that companies must follow when handling this type of information. Building on those requirements, the DoD created the CMMC, which requires companies to demonstrate that these protections are in place, not just in the cybersecurity world, but also in physical work environments.
As part of Duncan Aviation's commitment to supporting DoD with aircraft maintenance, it has made extended efforts to establish DMS as a highly secure area to protect sensitive information. DMS has become a fully controlled space for sensitive work. This includes limiting physical access to authorised personnel and maintaining strict records of who enters these specialised shop areas. These investments provide customers with confidence that sensitive technical data remains protected throughout every phase of manufacturing, repair and modification.
