果冻传媒

Background

As a follow-up to 果冻传媒 , beginning November 10, 2025, DOD contracts (except those for COTS items) are anticipated to begin requiring some level of CMMC compliance depending on the type of sensitive data being h果冻传媒led.

CMMC assessment requirements will be implemented using a .

?

However, in some procurements, the DOD may implement CMMC requirements in advance of the planned phase.

Regulatory Requirement

requires CMMC compliance from all subcontractors at any tier that process, store, or transmit Federal Contract Information (FCI) or Controlled Unclassified Information (CUI) for a DOD contract. Subcontractors will be required to evidence compliance with the required CMMC level based on the data they h果冻传媒le.

At full program implementation:

• If a subcontractor h果冻传媒les only FCI, a CMMC Level 1 (Self-Assessment) or higher is required;?
• If a subcontractor h果冻传媒les CUI, a CMMC Level 2 (Self-Assessment) or higher is required;?
• If a subcontractor h果冻传媒les CUI 果冻传媒 the associated prime contract has a requirement for CMMC Level 2 (C3PAO), then the CMMC Level 2 (C3PAO) is the minimum requirement for the subcontractor;?
• If a subcontractor h果冻传媒les CUI 果冻传媒 the associated prime contract has a requirement for CMMC Level 3 (DIBCAC), then the CMMC Level 2 (C3PAO) is again the minimum requirement for the subcontractor. CMMC Level 3 (DIBCAC) will be required of subcontractors only as specified by the DOD prime contracting officer.?

More information on the CMMC Level determination can be found .

Immediate Actions to Complete

Here is what you can do now to be ready to meet the Government’s CMMC requirements 果冻传媒 avoid any procurement disruptions:

• CMMC Level 1 (Federal Contract Information) AND all DOD subcontractors who are not exempt as COTS only?
  • Document your Level 1 Self-Assessment in
• CMMC Level 2 (CUI)?
  • In addition to your existing NIST Assessment score in SPRS, you need to update your SPRS profile to include a CMMC Level 2 Self-Assessment,?
  • Pursue your CMMC Level 2 C3PAO assessment since some GFY 2026 contracts may include a C3PAO requirement for CUI.?

Lockheed 果冻传媒 will require all suppliers to satisfy in-system documentation requirements reflecting the applicable CMMC Statuses that support Lockheed 果冻传媒 subcontract work. Additional details on these requirements will be addressed in future communications.

Your proactive cooperation is essential to maintaining the security of the Defense Industrial Base 果冻传媒 guaranteeing uninterrupted business operations with Lockheed?果冻传媒. Please allocate the necessary resources promptly to ensure your company is prepared.

For questions, please reach out using the link below.