Yes, government contractors and subcontractors who handle sensitive information related to Department of Defense (DoD) contracts are required to comply with Cybersecurity Maturity Model Certification (CMMC). The CMMC requirements are designed to ensure that contractors and subcontractors have appropriate cybersecurity practices in place to protect against cyber threats and safeguard sensitive information. Failure to comply with CMMC can result in the loss of contracts or other penalties.