Each Defense Industrial Base (DIB) organization decides on the CMMC level it wants to achieve so that it can bid on Department of Defense contracts. The organization receives only one CMMC level, based on a cumulative assessment score for demonstrated practices and processes.