CMMC Level 1 · GuideSEC / GDE

Guide

Can I use a POA&M at CMMC Level 1?

Short Answer

No. A Plan of Action and Milestones is not permitted at CMMC Level 1. Every one of the fifteen requirements must be MET or N/A before you can affirm. There is no partial pass.

Why there is no POA&M here

At higher levels a POA&M lets an organization defer a limited number of items with a plan to fix them. Level 1 is all-or-nothing, so there is nothing to defer. If a requirement is NOT MET, the overall result is NOT MET.

What that means in practice

You resolve every requirement to MET or N/A first, then affirm. There is no conditional Level 1 status.

Primary Sources

Build the Record Behind This

AssessrLog is the self-serve system of record for your Level 1 self-assessment. Scope your FCI, work all 59 objectives at your own pace, log each determination with its evidence, and hand your official a clean, defensible package. The determination is always yours to make.