The Department of Defense has new requirements for companies that hold Department of Defense contracts.
The entire defense supply chain is affected by the guidelines laid out in the CMMC. That includes vendors, contractors, all third parties included in contracts, and any tangentially related organization that provides business support to the DoD—even if it’s an indirect relationship such as janitorial staff.