If your company handles Federal Contract Information (FCI) for the Department of Defense, you need CMMC Level 1 to win and keep those contracts. Here is the whole picture in about a minute.
What Level 1 covers
Level 1 covers 15 basic safeguarding requirements, the same ones in FAR 52.204-21. They come down to:
Who can access your systems, and what they can do there
How users and devices sign in
How you protect your devices, your media and your office
How you guard your network boundary and keep systems patched and free of malware
What you do every year
Level 1 is a self-assessment. Under 32 CFR 170.15, you assess against all 15 requirements, enter the results in SPRS, and a senior official affirms compliance. You repeat the self-assessment and affirmation every year.
How we lead you through it
We assess where you stand and map every requirement.
We lay out exactly what needs to change.
Your team makes the changes with our guidance.
We validate each one and build your evidence package.
You complete your annual self-assessment in SPRS with confidence.
Start here
Cyberneza is a veteran-owned, 100% US-based cybersecurity and compliance firm in Orlando, Florida. Get expert-led help with CMMC Level 1: https://cyberneza.com/cmmc
Sources: 32 CFR 170.15, FAR 52.204-21
Top comments (0)