Why Should Contractors Care about Department of Defense’s (DoD) CMMC Cybersecurity Requirements?

Any business that performs on or aspires to win contracts with the Department of Defense as a prime, subcontractor, or supplier should be paying attention to the DoD’s cybersecurity requirements now in effect.

The simple truth is, if a business doesn’t meet them, they will not get a contract.

Don’t Put Cybersecurity Requirements Off

CMMC requirements are here and showing up on DoD contracts.

If firms want to do business with the DoD, they will need to comply based on the type of information they receive, store, and transmit as part of their contract.

There is help available to assist businesses understand their obligations and make progress toward achieving them.

Washington APEX Accelerator is Ready to Assist

Our Washington APEX Accelerator (APEX) team has already started receiving daily and often panicked calls and emails from businesses.

Why?

This fall, Level 2 Cybersecurity Maturity Model Certification (CMMC) requirements will be included in contracts.

CMMC requirements are based on the type of information that a DoD contractor receives, stores and transmits via IT hardware, software, and networks as well as within a business’s facilities and through its employees, subcontractors, and suppliers.

In anticipation, DoD contracting officers and prime contractors are notifying their subs and suppliers that they need to complete either a Level 2 self-assessment or get a stamp of approval from a third-party auditor certifying that the company’s cybersecurity posture is sound.

Level 1 CMMC requirements have been in effect since last November.

So, What’s a Business to Do?

The answer is to get educated and take action toward compliance. But complying with CMMC requirements is not easy.

To help, Washington APEX Accelerator has assembled a list of resources available to businesses to determine what CMMC level the company needs to meet and how to comply.

Washington APEX Accelerator Led Training

CMMC Level 1 Cohort Workshop Series

The APEX Accelerator Advisors at Economic Alliance Snohomish County continue offering a guided training program to help businesses understand and pursue Level 1 CMMC requirements, which is a good first step for companies that will eventually need to meet the CMMC Level 2.

The cohort series offers an intensive, practical, and accessible approach through a robust curriculum developed by Totem Technologies and in partnership with the online government contracting educational platform, Govology.

APEX is offering cohorts now through March 2027. There is a fee to attend this course.

Follow the links below for more details.

Workshops

For a broad overview of the DoD Cybersecurity Maturity Model Certification (CMMC), sign up for one of the following workshops offered by APEX Advisor, Terry Holmberg:

• DoD Cybersecurity Requirements On-Demand
• DoD Cybersecurity Requirements Live Workshop, September 9, 2026
• DoD Cybersecurity Requirements Live Workshop, February 10, 2027

Meet One-on-One with your APEX Advisor

Reach out to your Washington APEX Accelerator Advisor for help identifying what CMMC level you will need.

If you do not have an advisor, go here to become a Washington APEX Accelerator client.

• Your business must be based in Washington State for WA APEX Accelerator advising services.
• For businesses outside of Washington State, find your nearest APEX Accelerator HERE.

Other Helpful Resources

Project Spectrum

Project Spectrum is a DoD Office of Small Business Programs initiative specifically designed to help small and medium-sized businesses like yours.

It is free of charge and offers:

• Cyber Hygiene Assessment Tool — evaluates your current posture against CMMC requirements
• NIST 800-171 Cyber Readiness Check — helps generate your SPRS (Supplier Performance Risk System) score, which DoD contracting officers can view
• Free online training courses covering CUI, System Security Plans (SSP), Plans of Action & Milestones (POA&M), and Foreign Ownership, Control, or Influence (FOCI)
• Vulnerability scanning tools and compliance resources

CMMC PNW Conference August 17 – 18, 2026 - Register HERE

This high-impact, two-day conference is built for defense contractors, compliance officers, and cybersecurity leaders in the Pacific Northwest.  

If you’re bidding on federal contracts, this event will help you understand exactly what’s required, avoid costly mistakes, and build a clear plan to get audit-ready—directly from DoD officials, Cyber AB leaders, and certified assessors.

The event is being held at the Clearwater Casino, Suquamish, WA

About Washington APEX Accelerator

APEX assists businesses through the government-contracting marketplace. The organization’s mission is to increase the number of government contracts awarded to Washington firms so that those firms can grow. Services include no cost, confidential, one-on-one technical assistance in all aspects of selling to federal, state, and local governments.

About Economic Alliance Snohomish County (EASC)

EASC builds community creating a unified voice for Snohomish County and is committed to growing and nurturing a vital and globally competitive regional economy through expanding partnerships, developing key resources and building infrastructure systems that create local and regional employment centers.