Miles Jamison 
- CMMI Level 3 promotes proactive, standardized processes and reduces execution risks
- CSA renewed ISO 9001, ISO/IEC 27001 and ISO/IEC 20000-1 certifications
- CSA obtained CMMC Level 2 certification in 2025
Client Solution Architects, a company offering integrated technology, engineering and operational services, has earned a Capability Maturity Model Integration Level 3 appraisal for its project operations. CSA said Thursday that Assess-IT conducted the appraisal under ISACA’s CMMI model.
What Does CSA’s CMMI Level 3 Appraisal Mean?
The CMMI model draws on established industry practices to assess organizational capabilities and how companies manage their operations. The Level 3 designation means CSA has formalized its processes based on internal standards, giving teams established procedures they can adapt to individual project requirements while maintaining consistency across projects.
Unlike a capability level assessment, which looks at individual capabilities, a maturity level rating assesses an organization’s overall process maturity. The CMMI model, which ISACA oversees through the CMMI Institute, sorts organizations into five maturity levels.
Organizations at Level 1 tend to run unpredictable, reactive processes. Level 2 brings well-defined management to individual projects but not yet to the wider organization. At Level 3, processes become proactive rather than reactive, reducing execution risks and inefficiencies. Level 4 organizations measure and control their processes using data-driven methods, while Level 5 organizations maintain stable, flexible practices that support continuous process refinement, innovation and agility.
ISACA’s CMMI program uses four appraisal types: benchmark appraisals assess overall performance, sustainment appraisals check whether an organization has kept its maturity level, action plan reappraisals give organizations that did not pass another attempt and evaluation appraisals help organizations prepare.
The Virginia Beach-based company said the recognition highlights its adoption of consistent operational practices and follows the renewal of three industry certifications covering IT service management, data security and quality standards.
Kristina Reyna, CSA’s senior director of IT operations, said the evaluation helps CSA identify areas where it can refine its internal processes and customer-facing operations.
Assess-IT previously appraised the division at CMMI Level 3 for services in October 2023. That evaluation covered CSA’s leadership, program, contract, quality and risk management approaches.
What Cybersecurity & Quality Credentials Does CSA Hold?
CSA’s three recertified standards are ISO 9001, ISO/IEC 27001 and ISO/IEC 20000-1. An independent certification body conducted a thorough audit of its systems and processes to grant the recertifications.
“Successfully maintaining these important ISO certifications is essential to ensure CSA operates with a high level of quality management and information security to support our customer’s missions and Warfighter readiness,” said CSA President and CEO Greg Blue.
The company also obtained Cybersecurity Maturity Model Certification Level 2 in 2025, an achievement that Blue described as an “important milestone” that highlights the company as a trusted Department of War service provider committed to cybersecurity.
“We remain proactive in upholding the highest standards to ensure confidence in our operations and in the solutions we deliver,” Blue said at the time.
Roughly 120,000 defense industrial base organizations will need CMMC Level 2 certification, though less than 1 percent had reached that level as of May, according to figures from CMMC support provider Summit 7.
