CMMC Phase 1: What Defense Manufacturers Must Do Now
If you’re a tier 2 or 3 defense manufacturer or specialty subcontractor that touches CUI, CMMC 2.0 is no longer a future problem. Phase 1 of the rollout is live, self-assessments and SPRS submissions are now real contract conditions, and primes are already tightening requirements on their supply chains. The question is no longer “Do we need to do something?” but rather “What do we do first without disrupting production?” What CMMC Phase 1 Actually Means for You Phase 1 focuses on CMMC Level 1 and Level 2 self-assessments, affirmations, and assessment information submissions in SPRS. For many SMB manufacturers, that translates to three practical pressures: You must be able to prove you understand your required CMMC level. You must be able to show how you’re meeting the mapped NIST…









