How This Reference Is Maintained

What This Reference Is

A public reference for CMMC Level 1. It shows the 15 requirements, the 59 assessment objectives, and the official assessment procedures for each, alongside plain-English answers to common questions.

Where the Official Text Comes From

Requirement statements, assessment objectives, and assessment procedures are reproduced exactly as printed in the DoD CMMC Assessment Guide, Level 1, Version 2.13 (September 2024).

That guide sets out the 15 requirements of FAR 52.204-21(b)(1) and the assessment objectives and procedures of NIST SP 800-171A (June 2018), with Federal Contract Information in brackets where NIST says CUI. 32 CFR Part 170 is the rule that defines the CMMC program and Level 1.

How the Text Is Shown

The words of official text are never changed. On screen, a statement may start with a capital letter, and an assessment procedure list is shown as one bullet per item. The words, brackets, and spelling are the printed ones.

Plain-English answers, guides, and questions are written by AssessrLog. They are set apart from the official text and never presented as government text.

How It Is Verified

Every requirement statement, assessment objective, and assessment procedure is checked character for character against official copies of the source documents. The requirement statements are also checked against FAR 52.204-21 as published in the eCFR, and the objectives and procedures against NIST SP 800-171A.

Each requirement and objective page shows the date of the last full check, and links to the page of the official document that prints its text, so a reader can confirm it in seconds.

Every link to an official document is checked each week, and the official guide and NIST SP 800-171A are compared against the exact copies the text was verified against, so a republished document is caught and checked again.

When Sources Disagree or Change

When counts or terms differ between documents or versions, the reference names the source and version and explains the difference, for example why Level 1 has 15 requirements while older material lists 17 practices.

When an authority publishes a new version, its text is extracted and checked again before any page changes.