CMMC Assessment Guide Level 1 Version 2.13

This guide serves as a comprehensive resource for organizations preparing for and conducting a Level 1 self-assessment under the Cybersecurity Maturity Model Certification (CMMC) Program. It outlines the requirements as specified in section 170.15 of title 32, Code of Federal Regulations (CFR), focusing on the safeguarding of Federal Contract Information (FCI). The document is structured to assist Organizations Seeking Assessment (OSAs), cybersecurity professionals, and supporting individuals or companies. It details the assessment process, compliance documentation, and the scope of the self-assessment. The guide also includes specific criteria and methodologies for conducting the assessment, as well as requirement descriptions for each of the 15 basic safeguarding requirements outlined in the Federal Acquisition Regulation (FAR) Clause 52.204-21. Additionally, it clarifies custom terms relevant to the CMMC Program and provides guidance on the assessment findings and reporting.