AssessrLog Publishes a Free CMMC Level 1 Reference Center

CMMC Level 1 draws its 15 requirements from FAR 52.204-21 and measures them through the 59 assessment objectives in NIST SP 800-171A (June 2018), across six domains. The source material is public, but it is written for assessors, not for the office manager or owner who often runs a small supplier's self-assessment. The reference center shows that official text exactly as printed, with one page per requirement and one page per objective, and explains it in plain language through a short answer on each requirement page and a set of guides.

The reference center covers the full Level 1 picture.

• A page for each of the 15 requirements, with the official text, its FAR source, and a plain-English answer
• A page for each of the 59 assessment objectives, with the official objective text and its assessment procedures
• Short guides that answer the common questions, such as whether Level 1 is a certification, whether a C3PAO is involved, and how FCI differs from CUI
• A glossary of the core terms, including FCI, SPRS, the annual affirmation, and the affirming official
• A Level 1 checklist to see the whole scope at a glance

"The regulation is public, but it reads like it was written for auditors, because it was. We wanted a version a non-specialist could actually follow, one page per requirement and one page per objective, grounded in FAR 52.204-21 and NIST SP 800-171A, with nothing invented and nothing simplified into being wrong. Understanding what Level 1 asks of you should not be the expensive part," said Chris Burkhardt, Co-founder & CTO of ProfytAI, the company behind AssessrLog.

The reference center is open now at the CMMC reference center. It is a companion to the AssessrLog platform, where a supplier runs and records the self-assessment itself.

About AssessrLog

AssessrLog is the assessment platform for federally regulated organizations and institutions, built for the small defense suppliers working through CMMC Level 1. Assess it. Log it. Prove it. AssessrLog is a product of ProfytAI Pte. Ltd. AssessrLog is not a C3PAO, does not certify compliance, and is not affiliated with or endorsed by the Department of Defense.