CMMC certification is a tiered system, with five levels of certification for contractors that are dependent on the CUI (Controlled Unclassified Information) and security considerations of various DOD projects that contractors will be working on.
The question then arises from some contractors — if we don’t handle any CUI, is CMMC certification still necessary?
The answer is, in a word, yes. All contractors working with DOD will need CMMC certification. If you don’t work with any CUI, then Level 1 certification will be sufficient for your company.