Frameworks · 2.13
CMMC Level 1 (FAR 52.204-21)
15 controls. Status is what this organization's NIST SP 800-171 findings imply for each Level 1 requirement through the crosswalk. It is not a Level 1 self-assessment result, which the organization records itself.
| Control | Title | Status | Supported by 800-171 |
|---|---|---|---|
| AC.L1-b.1.i | Authorized Access Control | Implemented (via 800-171) | |
| AC.L1-b.1.ii | Transaction & Function Control | Implemented (via 800-171) | |
| AC.L1-b.1.iii | External Connections | Implemented (via 800-171) | |
| AC.L1-b.1.iv | Control Public Information | Not implemented | |
| IA.L1-b.1.v | Identification | Implemented (via 800-171) | |
| IA.L1-b.1.vi | Authentication | Implemented (via 800-171) | |
| MP.L1-b.1.vii | Media Disposal | Implemented (via 800-171) | |
| PE.L1-b.1.viii | Limit Physical Access | Implemented (via 800-171) | |
| PE.L1-b.1.ix | Manage Visitors & Physical Access | Implemented (via 800-171) | |
| SC.L1-b.1.x | Boundary Protection | Not implemented | |
| SC.L1-b.1.xi | Public-Access System Separation | Implemented (via 800-171) | |
| SI.L1-b.1.xii | Flaw Remediation | Implemented (via 800-171) | |
| SI.L1-b.1.xiii | Malicious Code Protection | Implemented (via 800-171) | |
| SI.L1-b.1.xiv | Update Malicious Code Protection | Implemented (via 800-171) | |
| SI.L1-b.1.xv | System & File Scanning | Implemented (via 800-171) |
The 15 basic safeguarding requirements of FAR 52.204-21(b)(1) as assessed under CMMC Level 1. Requirement text from the CMMC Assessment Guide - Level 1, v2.13 (September 2024).