# CMMC Level 1 Compliance Kit

> Download the CMMC Level 1 kit: self-assessment guide, 15-requirement checklist, evidence spreadsheet, and public information policy for FCI contractors.

canonical: https://secureframe.com/cmmc-level-1-compliance-kit

- ### CMMC Level 1 Self-Assessment Guide — This guide walks FCI-only contractors through the what, why, and how of Level 1: how to scope, what FCI looks like in your environment, how to implement and prove the 15 requirements and 59 objectives, and how to submit and affirm in SPRS.

What’s included:

- How to identify FCI and examples of Level 1 contractors
- An overview of what the 15 requirements and 59 objectives actually ask you to implement and prove
- Realistic cost and timeline estimate for Level 1 readiness plus the annual self-assessment
- ### CMMC Level 1 Compliance Checklist — CMMC Level 1 self-assessment verifies that you have implemented 15 basic safeguarding requirements from FAR 52.204-21, using 59 assessment objectives derived from NIST SP 800-171A. This checklist explains what each requirement and objective is actually asking, plus what you have to prove and examples of evidence that would support a MET finding.

What’s included:

- All 15 Level 1 requirements and 59 assessment objectives, grouped into the six CMMC domains
- A plain-language statement of what you have to prove for each requirement, with examples of evidence that supports a MET finding
- ### CMMC Level 1 Evidence Collection Spreadsheet — This spreadsheet is the working record for your annual self-assessment. It lists all 15 requirements and 59 objectives as written, with a translation of what each objective is asking, how to implement it, and the evidence to collect, then rolls your answers up to a MET or NOT MET result you can enter in SPRS.

What’s included:

- Six domain tabs covering all 59 assessment objectives, with implementation and evidence examples for each
- A summary tab that scores each requirement and your overall assessment as MET or NOT MET
- ### CMMC Level 1 Public Information Policy — Level 1 includes a requirement to control information posted or processed on publicly accessible systems (AC.L1-B.1.IV) so FCI does not end up on a website, social account, or other public-facing application. This policy template defines how your organization reviews, approves, and monitors public content so that requirement is implemented and can be evidenced.

What’s included:

- Purpose, scope, roles, and a content review and approval process for posting on websites, social media, and other public systems
- Monitoring and training requirements for posters and reviewers
- Non-compliance language written for Level 1, where remaining gaps have to be fixed before you affirm in SPRS