CMMC Level 1 Compliance
Protect Federal Contract Information with confidence
Contact Us
Overview
CMMC Level 1 is the foundational tier of the Cybersecurity Maturity Model Certification, requiring implementation of 17 basic cybersecurity practices to protect Federal Contract Information (FCI). While the controls are straightforward compared to Level 2, achieving and documenting compliance still requires careful attention and a structured approach.
PCShards guides defense contractors through every step of CMMC Level 1 compliance — from initial gap assessment through control implementation and self-assessment preparation. We ensure your organization meets all 17 practices with properly documented evidence that will stand up to scrutiny.
Level 1 requires an annual self-assessment rather than a third-party audit, but the self-assessment must be thorough and accurate. We help you build a repeatable process that keeps your organization compliant year after year without reinventing the wheel each cycle.
What's Included
Everything you need, nothing you don't.
FCI Scoping
We identify exactly where Federal Contract Information enters, flows through, and is stored in your organization to define the boundary of your Level 1 assessment.
Gap Assessment
A thorough evaluation of your current posture against all 17 Level 1 practices, with a clear findings report that identifies what is in place and what needs work.
Control Implementation
Hands-on support implementing the technical and procedural controls needed to satisfy every Level 1 practice, from access control to media protection.
Self-Assessment Preparation
We walk you through the self-assessment process, ensure your evidence is organized and complete, and prepare your team to affirm compliance with confidence.
Annual Review Process
A repeatable annual review framework that keeps your Level 1 compliance current and your self-assessment documentation ready for submission.
Who It's For
Defense contractors and subcontractors that handle Federal Contract Information (FCI) and need to achieve CMMC Level 1 certification through self-assessment.
Our Approach
A proven methodology tailored to your needs.
FCI Identification & Scoping
We work with your team to identify all FCI in your environment and define the systems, users, and processes that fall within the Level 1 assessment boundary.
Gap Assessment
We evaluate your current implementation of each of the 17 Level 1 practices and produce a prioritized findings report with remediation guidance.
Remediation
We help you implement the controls and procedures needed to close identified gaps, providing hands-on technical support and documentation templates.
Self-Assessment Support
We guide you through completing your self-assessment, reviewing your SPRS score entry, and establishing an annual review cadence.
Ready to Get Started?
Let's discuss how we can help your business. Reach out for a free consultation.