Do Non-Defense Contracts Require CMMC?

No. CMMC (Cybersecurity Maturity Model Certification) is solely a Department of Defense initiative.

Many of the CMMC requirements will, of course, overlap with other non-Defense federal cybersecurity hygiene requirements. But the CMMC model and testing is a purely Defense oriented protocol.