Many DoD contractors are struggling to understand what requirements will apply to them once CMMC rolls out. CMMC defines three levels, but CMMC Level 2 may allow a self-assessment or may require a third-party certification assessment by a CMMC Third-Party Assessor Organization (C3PAO) which results in four different level/assessment scenarios. This post will help DoD contractors understand what CMMC requirements will apply based on the types of information they handle for DoD.
