Secure by Design: How Okta + Virtru Give Defense Contractors a Compliant, Flexible Path to CMMC Level 2

Enterprise-grade. Deployment-flexible. Audit-ready.

With the DFARS rule now effective as of November 10, 2025, CMMC requirements are being incorporated into DoD contract solicitations — and organizations must demonstrate compliance at the time of contract award. For the thousands of defense contractors and subcontractors navigating this reality, the question isn't just what controls you need — it's how you implement them without disrupting the way your business operates.

In this 60-minute session, Andrew Lynch, VP of Velocity Sales at Virtru, and Naveed Mirza, Senior Solutions Engineer from Okta will break down how two best-in-class, enterprise-ready platforms can be layered together to address a significant portion of the 110 NIST SP 800-171 controls required for CMMC Level 2 — for organizations of any size. Rather than a one-size-fits-all approach, this session shows how to "right-size" cybersecurity with a contractor's actual risk profile based on the data they need to protect — without forcing your team into rigid, expensive enclaves that limit operational flexibility.

Attendees will walk away understanding:

• How Okta and Virtru integrate as complementary layers of identity and data security

• Which specific CMMC Level 2 control families each platform directly addresses

• How to achieve compliance that works across your existing tools, workflows, and team sizes — not around them