# Defense Suppliers Prepare for CMMC

Pneu-Draulics reports that it completed a Cybersecurity Maturity Model Certification (CMMC) Level 1 self-assessment and met the Level 1 requirements, but formal government recognition is still pending. The Department of Defense is phasing CMMC requirements into contracts from November 2025 through 2028, making supplier assessment status relevant to primes and other defense contractors managing supply chains that handle Federal Contract Information (FCI).

- Primes and other contractors should identify which suppliers handle FCI and verify the assessment or certification status required for the applicable contract.
- Pneu-Draulics’ self-assessment is not the same as formal government recognition; buyers should confirm the supplier’s status before relying on it for contract requirements.
- The phased implementation creates a need for defense suppliers to coordinate cybersecurity expectations with their prime customers as requirements enter contracts through 2028.

**Jurisdictions:** federal
**Industries:** Defense & Military
**Topics:** Cybersecurity
**Published:** November 03, 2026

### Government Entities
- Department of Defense (DoD)

### Vendors
- Pneu-Draulics (Supplier of sealing components)

### Key Quotes
> Our aerospace and defense customers pass cybersecurity requirements down to their suppliers, and we want to be ready when that happens,
> — Bobby Kerns, VP of Sales & Marketing

### Sources
- [Sealing Supplier Meets CMMC Level 1 Requirements](https://www.thomasnet.com/insights/sealing-supplier-meets-cmmc-level-1-requirements) - Thomasnet