Category: Data

If your company works with the US Department of Defense (DoD) as a contractor or subcontractor, you will need to prepare to meet CMMC requirements in order to successfully bid on and win contracts. If your organisation or company is a part of the Department of Defense’s supply chain (or plans to be in the near future) as either a contractor or subcontractor then you will require CMMC certification.

By October 1st 2025 all DoD contracts that exceed the micro-purchase threshold of $10,000 will be required to achieve CMMC certification.

If you only handle Federal Contract Information (FCI) then you will have to meet CMMC level 1 requirements and FAR Clause 52.204-21. If your company has little to no interaction with CUI then it is very likely as a DoD contractor that you will only need to meet CMMC compliance levels 1 & 2.

Related Articles