CMMC Level 1: where a small contractor should start
A practical sequence from the contract requirement to a repeatable annual review.
A field guide to basic safeguarding
Small steps.
Solid safeguards.
Make sense of CMMC Level 1, follow your Federal Contract Information, and organize the work behind an accurate self-assessment.
Original explanations · Official sources · No account needed
CMMC / Level 1 / field card 001FCI
15
safeguards.
One working plan.
One working plan.
ACAccess control
IAIdentity & authentication
MPMedia protection
PEPhysical protection
SCCommunications
SISystem integrity
Based on FAR 52.204-21 · Educational reference
A sequence you can follow
Understand. Then act.
A useful review starts with the actual work, then connects each safeguard to an owner and an explanation.
01
Know the data.
Distinguish public information, FCI, and questions that may involve CUI.
Start with the information ↗02
Trace the scope.
Follow the information through people, systems, locations, and services.
Map the workflow ↗03
Check the work.
Use the complete requirements, sound questions, and current supporting records.
Explore all 15 safeguards ↗04
Review & affirm.
Separate the assessment, government record, and senior official’s affirmation.
Build the annual rhythm ↗The browser work planner
Give the next step
a place to live.
Assign owner roles, note evidence references, and organize follow-up across the 15 safeguards. Your plan stays in your browser. Export it when you need it.
Open your working planRequirementAuthorized access
Owner roleOperations + IT
Next stepReview account list
Evidence referenceInternal record 01
Illustrative planning record · No compliance score or government submission
Field notes / 13 practical guides
Answers with a next step.
Original examples and useful questions, with the primary sources close at hand.
FCI or CUI? Questions to answer before choosing Level 1
Follow the information and the contract instead of judging a file by its name.
The 15 FAR safeguards: a working map for Level 1
Understand the six families and the operational questions behind each requirement.
How to trace a Level 1 assessment scope
Follow FCI through mail, devices, services, and work locations before drawing the boundary.
Evidence examples that make a Level 1 review useful
Build a traceable explanation without turning your evidence folder into a data dump.
Annual self-assessment and annual affirmation are two responsibilities
Build a calendar that separates verification work from the senior official’s affirmation.
Preparing a Level 1 entry in SPRS
A preparation checklist for access, assessment information, affirmation, and record verification.
Access, identity, and authentication: check the differences
A practical walkthrough for the first six safeguards, from account ownership to public uploads.
Physical access and media disposal in a small business
Connect office habits, remote work, visitor handling, keys, and retired devices.
Boundaries, updates, protection, and scans: separate the checks
Turn broad “IT handles that” answers into a reviewable operational explanation.
Questions to ask a supplier or managed IT provider
Clarify information handling and operational responsibility before accepting a broad assurance.
Build a readiness plan without confusing it with a POA&M allowance
Give open work owners and closure checks before making a Level 1 assessment claim.
Readiness support, self-assessment, and status: what each means
Use accurate language when comparing advisers, software, and the government record.
No guides match that search. Try a shorter phrase or choose “All guides.”
13 guides
When you need a second set of eyes
A practical next step.
Independent education can help you ask better questions. For implementation or assessment decisions, bring the right people into the conversation.
Explore Federal Bid Partners readiness support ↗Help with Level 1 scope, readiness gaps, and supporting materials.Nichole Baker · Trustpilot review of Federal Bid Partners
· Read review ↗Feedback about Federal Bid Partners’ services, the publisher of this guide.
Selected excerpt · FBP service review
“Their attention to detail is phenomenal and the communication is top tier”
· Read review ↗Feedback about Federal Bid Partners’ services, the publisher of this guide.
Your organization remains responsible for implementation, its self-assessment, and the authorized senior official’s affirmation.