Guide
Can I use a POA&M at CMMC Level 1?
Short Answer
No. A Plan of Action and Milestones is not permitted at CMMC Level 1. Every one of the fifteen requirements must be MET or N/A before you can affirm. There is no partial pass.
Why there is no POA&M here
At higher levels a POA&M lets an organization defer a limited number of items with a plan to fix them. Level 1 is all-or-nothing, so there is nothing to defer. If a requirement is NOT MET, the overall result is NOT MET.
What that means in practice
You resolve every requirement to MET or N/A first, then affirm. There is no conditional Level 1 status.
Related Definitions
Related Questions
Primary Sources
Source Authority
- Primary Authority
- 32 CFR § 170.21(a)(1)
- Program Authority
- 32 CFR 170.15(c)(1)(ii) Table 2
- Framework Version
- CMMC Assessment Guide, Level 1 v2.13 (September 2024)
- Written By
- AssessrLog, from the primary sources listed above
Cite This Page
“Can I use a POA&M at CMMC Level 1?.” AssessrLog, a product of ProfytAI Pte. Ltd.. https://assessrlog.com/cmmc/guides/can-i-use-a-poam-at-cmmc-level-1/
Build the Record Behind This
AssessrLog is the self-serve system of record for your Level 1 self-assessment. Scope your FCI, work all 59 objectives at your own pace, log each determination with its evidence, and hand your official a clean, defensible package. The determination is always yours to make.