Managing Supply Chain Risk for Defense Contractors Under CMMC
If you are a defense contractor you likely will have to comply with CMMC. In fact, likely, you already have to comply with the core of CMMC, which is DFARS 252.204-7012. That DFARS has a mandatory “flow down” requirement, meaning that if you share CUI with your subs, they have to be compliant also. Are…