analyzing maturity level 2 of CMMC