Does CMMC apply to you?