CMMC Level 1 is the foundation for protecting Federal Contract Information (FCI) and maintaining eligibility for Department of Defense (DoD) contracts. Many organizations believe Level 1 is simple, but gaps in basic safeguards like access control, authentication, and media protection can still create compliance risks.

​

This practical, plain-English checklist helps your team understand what CMMC Level 1 requires, verify whether essential safeguards are in place, and quickly identify areas that may need improvement. With a clear, easy-to-follow approach, your organization can strengthen FCI protection, maintain compliance, and stay prepared for contract requirements.