What’s the difference between CMMC Level 1, 2, and 3?

Level 1 focuses on safeguarding Federal Contract Information (FCI). Level 2 focuses on protecting Controlled Unclassified Information (CUI) and aligns to NIST SP 800-171. Level 3 applies to the highest-priority programmes and builds on Level 2 with additional requirements.