The CMMC levels a subcontractor can declare
Level 1 for FCI only, Level 2 for CUI, the third-party Level 2 and Level 3 that are not designated during the suspension.
- CMMC Level 1 (Self)a subcontractor: FCI only, annual self-assessment
- CMMC Level 2 (Self)a subcontractor handling CUI
- CMMC Level 2 (C3PAO)a subcontractor, during the suspension
- CMMC Level 3 (DIBCAC)