You've Been Flowdown'd
THE CRUNCH · EP 10
TAP TO PAUSE
PAUSED — TAP TO RESUME
If you're a machine shop, a coatings house, or a specialty engineering firm that has never signed a government contract, CMMC still finds you — through your prime. When a prime's contract carries a CMMC requirement, it flows down to every subcontractor tier that handles federal contract information or CUI.
Receive a drawing, a spec, or a technical data package, and Level 2 obligations follow it. Primes are already sending questionnaires and contract amendments ahead of the November 2026 line, because their own award eligibility depends on a compliant supply chain.
For a small shop, here's the encouraging part: the disposition controls are among the fastest of the 110 to satisfy. Inventory your data-bearing assets, lock up the retired ones, engage certified destruction with serialized certificates, and write the one-page SOP. Weeks, not months.
The checklist gives your team the working tool; the guide's flowdown section explains exactly what your prime is asking for and why.