CMMC Levels
CMMC Level 1 Checklist for Small Defense Contractors
A focused Level 1 checklist for contractors handling FCI, based on the 15 FAR 52.204-21 safeguarding requirements and current CMMC self-assessment logic.
Read guide →CMMC Levels
CMMC Level 1 & Level 2 guides
The difference between FCI-driven Level 1 and CUI-driven Level 2, self-assessment vs. C3PAO, and how to tell which applies to a given contract.
CMMC Levels
CMMC Level 2 Self-Assessment: A Practical 2026 Guide
How Level 2 self-assessment works, what to scope, how to build evidence, and why current contract language matters in 2026.
Read guide →
CMMC Levels
CMMC Level 2 C3PAO vs Self-Assessment: The 2026 Difference
Compare Level 2 Self and Level 2 C3PAO without relying on outdated rollout assumptions after the 2026 Phase II suspension.
Read guide →
CMMC Levels
CMMC Levels Explained: FCI vs CUI Decision Guide
A data-first way to understand CMMC Level 1 and Level 2 by separating FCI from CUI before choosing controls, tools, or assessors.
Read guide →~~
Related clauses
~~- 252.204-7008 — What the 252.204-7008 offer representation actually commits a small defense contractor to, how it differs from 7012, and what to do if a gap exists at time of offer.
- 252.204-7019 — Why an award can hinge on a SPRS score that already exists before the proposal is due, and how to check it in time under 252.204-7019.
- 252.204-7020 — The clause that keeps a NIST SP 800-171 assessment score current through performance and forces prime contractors to check subcontractor scores before subcontract award.
- FAR 52.204-21 — A fast, checklist-style reference to the 15 basic safeguarding requirements in FAR 52.204-21 — the rule set CMMC Level 1 self-assessment is built on.