If the DoD contract has a CMMC requirement and so long as your company does not solely produce COTS products, you will need to obtain a CMMC certificate. The level of the CMMC certification is dependent upon the type and nature of information flowed down from your prime contractor. Click here to learn more about CMMC and What it Means for your Company.

Reference https://www.acq.osd.mil/cmmc/faq.html

This means as either the prime contractor or a sub-contractor, you will be required to a CMMC certificate level equal to or greater than the contract requires. Though the implementation of the CMMC certification requirement is scheduled to be implemented over the next five years, the CMMC-AB is encouraging DoD contractors of all levels to begin the process as soon as possible.

The Requirements: