Free CMMC Level 1 Self-Assessment Checklist
Free CMMC Level 1 Self-Assessment Checklist
Regular price
$0.00 USD
Regular price
Sale price
$0.00 USD
Instant download. Editable files. One-organization licence. 5-day fit guarantee.
Couldn't load pickup availability
A 15-minute check of your company against the 15 CMMC Level 1 requirements, in plain English, before you affirm in SPRS. One question per requirement, with a next step for every gap.
What you get
- Level 1 Checklist (Excel): 15 questions, one per FAR 52.204-21 safeguarding requirement, each labeled with its CMMC ID, with Yes / Partly / No answers and scoring.
- Printable checklist (PDF, 2 pages): the same questions, a plain-English explanation of FCI, scoring bands and a do-this-next table.
How to use it
- Answer each question with whoever manages your computers, accounts and office access.
- Count your Yes answers. Level 1 has no partial credit: all 15 must be met.
- Fix each Partly or No using the next-step table, then run the formal self-assessment against the 59 assessment objectives.
Want the full system?
The CMMC Level 1 Self-Assessment Kit ($79) has the 59-objective workbook, a ready-to-adopt policy, records pack and SPRS affirmation guide. If you also handle CUI, you need all 110 NIST SP 800-171 requirements: see the CMMC Level 2 Starter Bundle ($175).
Good to know
- Free instant download. Excel (.xlsx) and PDF; no macros.
- NIST SP 800-171/171A and FAR requirement text is quoted verbatim (public domain). Check your contract and the current rules for what applies to you.
- A quick readiness check, not the formal self-assessment. It cannot promise a score, a passing assessment or contract eligibility.
What every download includes
Instant downloadLink on the confirmation page and by email within minutes.
Fully editableExcel (.xlsx) and PDF. No macros. Works in Microsoft 365 and Google Workspace.
5-day fit guaranteeIf the files do not fit your CMMC program, ask for a refund within 5 days. Conditions apply.
Free updatesRevised files for the NIST SP 800-171 revision that CMMC enforces are sent to you at no charge. One-organization licence.
Built from the official NIST SP 800-171 Rev 2 and SP 800-171A text (US Government works). Templates help you prepare for a self-assessment or an assessment; they do not guarantee a passing score, a contract award or legal compliance.
Questions about Free CMMC Level 1 Self-Assessment Checklist
What does CMMC Level 1 require?
Level 1 applies to companies that handle Federal Contract Information (FCI) and covers the 15 basic safeguarding requirements in FAR 52.204-21: named accounts, limited admin rights, control of outside systems and public posting, passwords, media disposal, physical access and visitors, network protection, patching and malware protection. You self-assess annually and affirm in SPRS.
Is this checklist the same as the formal self-assessment?
No. It is a quick readiness check with one question per requirement. The formal self-assessment checks 59 assessment objectives with evidence. Use the checklist to find gaps fast, fix them, then complete the full assessment, for example with the CMMC Level 1 Self-Assessment Kit.
Can we affirm Level 1 with a gap and fix it later?
No. Level 1 allows no partial credit and no plan of action and milestones (POA&M): all 15 requirements must be met before you affirm. The affirmation is your company's statement to the government, and inaccurate affirmations carry False Claims Act risk, so close gaps first.
Does CMMC Level 1 still apply after the 2026 changes?
As of September 2026, third-party assessments under Phase 2 were suspended and are being removed from contracts, but Level 1 annual self-assessments and affirmations, SPRS entries and DFARS 252.204-7012 obligations still apply. Rules are still moving, so check your contract and your prime's flowdown.
How will I receive the files?
A download button appears on the order confirmation page and the same link is emailed to you within a few minutes. Bundles arrive as one ZIP file.
Can I get a refund?
Yes. With our 5-day fit guarantee, if the files do not fit your CMMC compliance program you can ask for a full refund within 5 days of your order. It applies once per customer and organization, covers the whole product, and requires you to confirm you have deleted the files. We also refund non-delivery, defective files, wrong items and duplicate purchases within 30 days. Read the full refund policy.
Can I see the files before I buy?
Yes. The images above show real pages from the files, and the free CMMC Level 1 self-assessment checklist lets you check where you stand before you buy.
Can I use the templates with more than one company?
Each purchase is licensed to one organization. Consultants and groups need one licence per client or legal entity. See the licence agreement.
Templates that work with this one
Useful next steps for a CMMC and NIST SP 800-171 self-assessment.
