Do I need to flow down CMMC Level 1 requirements to my suppliers?
Last updated: 6/5/2025
If your suppliers will handle Federal Contract Information (FCI) on your behalf as part of a DoD contract, then yes, you will likely need to ensure they also meet CMMC Level 1 requirements. This is often a contractual obligation.