Some companies may choose not to work with DOD because of CMMC