At maturity level 2, projects establish the foundation for an organization to become an effective acquirer of needed capabilities by institutionalizing basic project management and supplier management practices. Projects define a supplier strategy, create project plans, and monitor and control the project to ensure the product or service is delivered as planned. The acquirer establishes an agreement with suppliers supporting the projects and manages such agreements to ensure each supplier delivers on commitments. The acquirer develops and manages customer and contractual requirements. Configuration management and process and product quality assurance are institutionalized, and the acquirer also develops the capability to measure and analyze process performance.

At maturity level 2, projects, processes, work products, and services are managed. The acquirer ensures that processes are planned in accordance with policy. In order to execute the process, the acquirer provides adequate resources, assigns responsibility for performing the process, trains people on the process, and ensures the designated work products of the process are under appropriate levels of configuration management. The acquirer identifies and involves appropriate stakeholders and periodically monitors and controls the process. Process adherence is periodically evaluated and process performance is shared with senior management. The process discipline reflected by maturity level 2 helps to ensure that existing practices are retained during times of stress.