CMMC Level 1 · Reference
CMMC Level 1 Glossary
The terms you meet in a Level 1 self-assessment, defined in plain English and tied to their source.
Terms
- FCIFederal Contract Information
- CUIControlled Unclassified Information
- TermSelf-Assessment
- TermAffirmation
- TermAffirming Official
- SPRSSupplier Performance Risk System
- C3PAOCMMC Third-Party Assessment Organization
- TermDetermination
- TermAssessment Objective
- TermSecurity Requirement
- POA&MPlan of Action and Milestones
- SSPSystem Security Plan
- TermCMMC Scope
- TermSpecialized Assets
- MFAMulti-Factor Authentication
- COTSCommercial Off-the-Shelf
How This Reference Is Maintained
Requirement statements, assessment objectives, and assessment procedures are reproduced exactly as printed in the DoD CMMC Assessment Guide, Level 1, Version 2.13, which sets out the FAR 52.204-21 requirements and the NIST SP 800-171A (June 2018) objectives and procedures for Level 1. Nothing in that official text is reworded. Each requirement and objective page links to the page of the official document that prints it. The text is checked character for character against the official documents, and the requirement statements against FAR 52.204-21 as published in the eCFR. Plain-English answers and guides are written by AssessrLog and are kept apart from the official text. When an authority publishes a new version, the text is extracted and checked again before any page changes.