The initial implementation of the CMMC will only be within the DoD. It is anticipated after the rollout of the CMMC program within the DoD, other Federal Agencies may consider the CMMC model as a means to secure information.

Note that at this time, the GSA is in their contracts has placed an option to require contracts to have CMMC certifications.