A supplier is required to perform to capability maturity model SEI level 3. During an audit, it was determined they do not have software development folders/files. When questioned, they indicated there was no contractual requirement for SDFs. Is there a correlation between CMM SEI level 3 and SDFs?