CMMC Academy

Learn CMMC

Understand each certification level, what it requires, who it applies to, and how to get there. Click into any control family for the detailed breakdown.

L1

Level 1: Foundational

Basic safeguarding of Federal Contract Information. 17 practices focused on fundamental cyber hygiene like access control, identification, media protection, physical protection, system integrity, and communications protection.

Controls
17
Standard
FAR 52.204-21
Assessment
Annual Self-Assessment
Protects
FCI
Who needs this level?

Any contractor handling Federal Contract Information (FCI) — even basic logistics, admin, or procurement data from DoD.

6 Control Domains in Level 1

🔐
Access Control
AC · 22 controls
🪪
Identification & Auth
IA · 11 controls
💾
Media Protection
MP · 9 controls
🏢
Physical Protection
PE · 6 controls
🛡️
System & Comm Protection
SC · 16 controls
🔍
System & Info Integrity
SI · 7 controls