Herstal, Belgium, 02 February 2026
FN Herstal, operating within the Defence and Security division of the Belgium-headquartered FN Browning Group, is pleased to announce that the Company has reached a major milestone in cybersecurity by obtaining CMMC (Cybersecurity Maturity Model Certification) Level 2, a stringent standard imposed by the US Department of War (DoW). This certification, granted for the next three years following an assessment conducted and validated by Redspin, positions FN Herstal among the very first European companies to achieve this level of cyber compliance.
Julien Compère, Chief Executive Officer of FN Browning Group: “Achieving this demanding certification demonstrates the high level of cybersecurity maturity attained by FN Herstal, fully aligned with the world’s most stringent cybersecurity standards. Just as we provide the world’s most demanding armed forces with innovative, highly dependable solutions, we are equally committed to meeting their highest expectations in information security.”
Brian McManamon, President of Redspin: “As the CMMC 3rd Party Assessment Organization (C3PAO) responsible for conducting and validating this assessment, Redspin can attest to the exceptional level of rigor and preparation demonstrated by
FN Herstal. Their certification signals to US and international partners that cybersecurity is embedded into how they operate, and it positions them as a leading example for European defence manufacturers engaging with the US defence industrial base.”
A Mandatory Requirement for Working with the US DoW
The CMMC certification is based on the NIST 800-171 Revision 2 standard and ensures the protection of Controlled Unclassified Information (CUI) within the framework of defence-related contracts. In a world where increasingly sophisticated and aggressive cyberattacks routinely target defence departments and their contractors, protecting such data has become an essential and mandatory requirement for any supplier or subcontractor working with the US DoW.
One of the Most Demanding Assessments
The assessment process conducted at FN Herstal stood out due to its exceptionally high level of rigor. CMMC assesses against a total of 110 controls, and 320 objectives. To meet these expectations, FN Herstal invested in governance, advanced tools, strengthened cybersecurity policies and large-scale employee awareness initiatives.
This two‑and‑a‑half‑year, Group‑wide effort has endowed FN Herstal and the entire
FN Browning Group with an exceptionally robust level of cybersecurity, delivering long‑term benefits for the Group and all our customers.
A Strategic Step Forward for FN Herstal
The CMMC certification enhances FN Herstal’s ability to secure or renew sensitive contracts with the US DoW, strengthens the Group’s competitiveness in international markets, and prepares the organisation for future certifications. It represents a pioneering advantage within the European landscape.