We recommend clients target CMMC Level 2 because it encompasses all of the 110 controls in NIST SP 800-171.

Only DoD can direct an organization to be CMMC Level 3 Certified.  It is recommended that organizations that already handle Classified artifacts, work with Space, Command and Control, or are large integrators be ready to be CMMC Level 3 certified.