Male soldier working with laptop in headquarters building

Home » Resources » Data Erasure at Every CMMC Level

Data Erasure at Every CMMC Level

Please note that on July 13, 2026, the Department of War suspended CMMC Phase II requirements, which had been scheduled to take effect on November 10, 2026, along with later Phase III and Phase IV milestones, pending a 60-day program review. As a result, some details in this article may be outdated. Phase I self-assessment requirements and underlying obligations such as DFARS 252.204-7012 and NIST SP 800-171 remain in effect. For the current status of the review, see the DoW’s official announcement, or read our blog, CMMC Level 2 Requirements in the 2026 Pause, for what this means for your compliance timeline.


How Blancco Helps U.S. Defense Contractors Fulfill CMMC Media Sanitization Requirements 

Contractors for the United States Department of Defense handle a lot of government data, and a new certification framework is being rolled out to make sure that data is protected.

The Cybersecurity Maturity Model Certification (CMMC) framework confirms an organization’s ability to protect FCI (federal contract information) and CUI (classified uncontrolled information). Instead of the previous method of relying on organizations’ self-assessments, third-party assessors evaluate contractor competencies across five levels of cybersecurity maturity.

The good news is that Blancco’s globally certified data erasure solutions and audit-ready reports equip you to follow all CMMC media sanitization requirements across an incredibly wide set of data storage devices. This comprehensive approach provides operational efficiency, consolidated support and training, and centralized reporting to verify compliance.

Download our CMMC Solution Brief to see how Blancco expertly erases content at all five CMMC levels according to NIST 800-88 media sanitization guidelines.

U.S. Defense Contractors:
Request Your Free Data Sanitization Trial Here

Experience secure, auditable, CMMC-compliant data erasure software.