Which CMMC level applies to your contracts?
Your required CMMC level is based on the solicitation or contract and the type of information your systems process, store, or transmit. Company size, industry reputation, or informal guidance do not determine your CMMC level.