All programs / CMMC / Level 1
For contractors that handle Federal Contract Information. Work through the 15 requirements with a free guided questionnaire, get your System Security Plan and policies prepared, or let NBT Systems guide you to your annual affirmation.
Level 1 is the foundation of CMMC, but it’s not a formality. Every requirement must be fully in place before you affirm.
Basic protections for FCI drawn from FAR 52.204-21: access control, identification and authentication, media protection, physical protection, system and communications protection, and system integrity.
You assess your own implementation every year and enter the results in the Supplier Performance Risk System (SPRS).
A senior company official affirms compliance in SPRS each year. That affirmation is a formal representation to the government.
All three options use the same questionnaire, so you can start free and step up without redoing your answers. Not sure what you’ll need? Use the readiness worksheet.
For contractors that want to check their readiness themselves.
No account or payment required
For contractors that answer the questions and want the documentation done right.
Everything in the free questionnaire, plus:
For contractors that want professionals to lead the work.
Introductory price for companies up to 25 employees. Larger companies quoted.
The documentation package and guided build produce these seven documents, tailored to your company.
Level 1 doesn’t mandate an SSP the way Level 2 does, but documenting how you meet each requirement is the best evidence behind your affirmation, and it prepares you for Level 2 if your contracts grow.
The affirmation must come from a senior official of your company. We prepare you for it, explain each SPRS field, and make sure your results are supported, but your official submits and affirms.
The questionnaire flags them as blocking, and the remediation tracker lists what to fix. You shouldn’t affirm until every requirement is fully in place. Our guided build includes help closing those gaps.
Yes. Level 1 self-assessments and affirmations are annual. Your progress file and documents make next year’s review much faster.
Describe your company, systems and practices, but never the contents of FCI or other contract data.
Start free, or talk to NBT Systems about your Level 1 requirements.
