It’s taken some time for me to catch up on things CMMC.

← Back to Blog

It’s taken some time for me to catch up on things CMMC. But here’s an interesting solicitation published mid-April 2026 for a sole-sourced contract between the US Naval Air Warfare Center Weapons Division and Raytheon

What is interesting is the following A Cyber Maturity Model Certification (CMMC) Level 3 (DIBCAC) is anticipated for this requirement. If you disagree with the anticipated CMMC Level, please provide a rationale and the recommended CMMC Level. 

Now, CMMC level 3 compliance is due to start from November 2027. CMMC level 3 certification requires successful CMMC Level 2 compliance and certification.

As this is a sole-source contract with Raytheon, what happens with respect to CMMC compliance certification? What and who carries the compliance risk? How far down the supply chain will a DIBCAC compliance evaluation flow?

@Parava Security Solutions Raytheon

#cmmc

https://lnkd.in/e6vbeRWD

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7457134362032214018