CMMC Level 1 guides
Plain-English explanations of the requirements, annual process, scope, evidence, and subcontractor conversations. These are preparation resources, not an official assessment.
CMMC Level 1
Use them to understand the 15 safeguards, distinguish assessment and affirmation steps, check applicability, organize evidence, and prepare for prime-contractor questions.
Use this plain-English checklist to understand the 15 FAR 52.204-21 safeguards for FCI and prepare for a scoped CMMC Level 1 self-assessment.
Read guideUnderstand the annual Level 1 self-assessment, SPRS result submission, and separate Affirming Official affirmation under 32 CFR Part 170.
Read guideCompare CMMC Level 1 safeguards for FCI with Level 2 requirements for CUI, and learn how contract language and system scope affect applicability.
Read guideOrganize practical records for a CMMC Level 1 review, map evidence to the 15 FAR 52.204-21 safeguards, and note the six-year retention rule.
Read guidePrepare for a prime's CMMC Level 1 questions by reviewing contract flow-downs, FCI scope, assessment records, CAGE codes, and SPRS affirmation.
Read guideStart with the free CMMC Level 1 Readiness Check or review the CMMC Level 1 Self-Assessment Kit.
Additional reading
These older articles cover broader topics such as account security, customer questionnaires, and backup testing. They are secondary to the CMMC Level 1 guides above.
A low-disruption way to move a small team to phishing-resistant multi-factor authentication without treating rollout as a one-day switch.
Read guideA repeatable process for giving customers useful, accurate answers while keeping ownership, evidence, and exceptions visible.
Read guideA practical restore test that checks more than whether a backup job says “successful.”
Read guide