Achieving CMMC compliance requires more than just safeguarding Controlled Unclassified Information (CUI). Defense Contractors must also create extensive documentation, which the DoD estimates will take 168 hours at a cost of $40,000. This leaves contractors to  choose between tackling this time-consuming burden themselves or  hiring costly external consultants.