A DoD contract or subcontract that requires CMMC Level 1
CMMC Level 1 self-assessment
We assess the 15 CMMC Level 1 requirements from your own evidence and write the policies your affirming official needs.
| Part | Who |
|---|---|
| Each requirement marked MET or NOT MET with your evidence | We prepare |
| Access control and media disposal policies drafted | We prepare |
| Missing: proof of antivirus updates on 3 laptops | You supply |
| Brief for your affirming official | We prepare |
| Enter the result in SPRS and affirm | You supply |
$750750.00 USD per company per year, earned when you confirm the order, refunded in full if the checked pack is not delivered by the agreed deadline
- You send
A list of the computers, accounts and cloud services that touch your DoD contract information.
- We prepare
We mark each requirement MET or NOT MET from your evidence, draft the policies it calls for and brief your affirming official.
- You pay
750.00 USD per company per year, earned when you confirm the order, refunded in full if the checked pack is not delivered by the agreed deadline
You enter the result in SPRS and your own official affirms it. We never affirm or certify for you.
yourcompany.com Found
The public pages read are listed, each with its title.
- Your pages say
- A line from your site, linked to its page
- May fit
- CMMC Level 1 self-assessment, with its cited rule
- The one record
- A list of the computers, accounts and cloud services that touch your DoD contract information.
- Fee
- 750.00 USD per company per year, earned when you confirm the order, refunded in full if the checked pack is not delivered by the agreed deadline
Accept termsConfirm the result
The rules that usually decide this
To hold Final Level 1 (Self), a contractor must score MET on all 15 FAR 52.204-21(b)(1) safeguarding requirements. No POA&M is permitted at Level 1. The self-assessment is repeated annually and its results submitted in SPRS.
32 CFR 170.15(a)(1); 170.14(c)(2); 170.21(a)(1); 170.4 (definition of CMMC Security Requirements)FAR 52.204-21(b)(1)(i)-(xv) sets 15 basic safeguarding controls for systems holding Federal contract information, e.g., limit access to authorized users, sanitize or destroy FCI media before disposal or reuse, escort visitors, and update malicious code protection.
FAR 52.204-21(b)(1)(i)-(xv), Basic Safeguarding of Covered Contractor Information Systems (NOV 2021)An Affirming Official, the senior-level representative responsible for the organization's CMMC compliance, must affirm continuing compliance in SPRS at completion of the Level 1 self-assessment and annually thereafter.
32 CFR 170.22(a)(1), (b)(1)Under DFARS 252.204-7021 the contractor must have and maintain a current CMMC status for the contract's duration and keep an annual affirmation current in SPRS. A Final Level 1 (Self) status is current only if not older than 1 year.
DFARS 252.204-7021(a) (definition of Current), (d)(1)(i), (d)(3) (NOV 2025)Before award of a contract requiring Level 1 (Self), the contractor must hold that status and have submitted its SPRS affirmation. Level 1 has no conditional status: DFARS says Level 1 requires a final CMMC level for award.
32 CFR 170.15(b); DFARS 204.7502(b)(2)The artifacts used as evidence for a Level 1 self-assessment must be retained for six years from the CMMC Status Date.
32 CFR 170.15(c)(2)
General rules for this kind of work, from their sources: not yet checked against your company.
The clock on this work
A missed deadline turns a good claim into a lost one. Each bar starts at its own event and is drawn to scale.
Repeat Level 1 self-assessment and affirmationCMMC Status Date of Final Level 1 (Self)
CMMC Phase 2 begins (Nov 10, 2026)Phase 1 start: DFARS CMMC rule effective date, Nov 10, 2025
CMMC clause required whenever FCI or CUI is on contractor systemsDFARS CMMC rule effective date, Nov 10, 2025
Fees
Know the fee before any work
The first look is free. Before any paid work, we agree the exact documents, deadline and fee. Each service has one published price, paid when you confirm the order; we start once your payment arrives, and if the agreed, checked documents are not delivered by the deadline, you get the fee back in full. A score, grade or contract award never changes the fee.
You accept exact termsScope, fee and the event that earns it are written out before any paid work. Nothing is agreed until you press Accept or submit the complete acceptance statement shown in your private case.
You confirm the result firstAn invoice follows only your "Confirm the result" press, for exactly the agreed amount.
One private page for the whole caseMessages, terms, files and invoices stay on one page you keep.
We use public sources for the first look. If you continue, we work from records you choose to share. We prepare CMMC self-assessments, security plans and written safety programs for you to review, sign, affirm and upload. We do not contact the DoD, your customer, an assessor or a prequalification platform for you, and we never affirm or certify on your behalf.
Questions
Do you certify us?
No. Level 1 is a self-assessment: you enter the result in SPRS and your own senior official affirms it. We prepare the assessment and documents from your evidence.
What if a requirement is not met?
It stays NOT MET in the pack, with what is missing, so you can fix it before anyone affirms.
CMMC Level 1 self-assessment
750.00 USD per company per year, earned when you confirm the order, refunded in full if the checked pack is not delivered by the agreed deadline
Show me what applies