The AssessrLog Blog.
Practical articles for defense suppliers working through CMMC Level 1.
Do You Need an SSP for CMMC Level 1?
Whether a System Security Plan is required for CMMC Level 1, what documentation Level 1 actually calls for, and why a central record still helps.
How to Complete Your CMMC Level 1 Self-Assessment
A plain-English walkthrough of the CMMC Level 1 self-assessment. The 15 requirements, the 59 objectives, evidence, and the annual SPRS affirmation.
Submitted CMMC Level 1 to SPRS and It Felt Too Easy?
Submitting a CMMC Level 1 self-assessment can feel too easy. What must be true before you submit, the separate affirmation step, and the six-year record.
What a CMMC Level 1 Self-Assessment Actually Costs
The real cost of CMMC Level 1. The DoD's own estimate, why there is no assessor fee, and why the eye-watering quotes you have seen are usually for Level 2.
CMMC Level 1 Has 15 Requirements, Not 17 Controls
Why you see 15, 17, 49, and 61 for CMMC Level 1, and the correct answer. Fifteen requirements, fifty-nine objectives, six domains, and no score.
What Is FCI? Plain Examples for Defense Suppliers
A plain-English definition of Federal Contract Information with real examples, how it differs from CUI, and why it decides whether CMMC Level 1 applies.
CMMC Level 1 Evidence Examples, Objective by Objective
Real, plain-English evidence examples for the CMMC Level 1 requirements, organized by domain, so you know what proof to keep behind each determination.
CMMC Level 1 or Level 2? Which Does Your Contract Need
The difference between CMMC Level 1 and Level 2, what triggers each, and how to read your own contract, without anyone guessing your level for you.
CMMC Level 1 Affirmation. What Your Official Signs.
Who signs the annual CMMC Level 1 affirmation, what it commits your company to, and what record should sit behind it before anyone clicks affirm in SPRS.