Any contractor or subcontractor in the Defense Industrial Base (DIB) that handles CUI or FCI will need to meet CMMC requirements. This includes manufacturers, IT vendors, logistics companies, and service providers in the DoD supply chain.