Reference
CMMC Level 1
Every control in the Level 1 model, stated in plain English alongside the official requirement. These are the safeguards for handling Federal Contract Information.
- Version
- 1.4.0
- Domains
- 6
- Controls
- 15
Access Control
4 controls- AC.L1-b.1.iAuthorized Access ControlOnly approved users and devices can log into systems.6 assessment questions
- AC.L1-b.1.iiTransaction & Function ControlUsers only get permissions needed for their job.2 assessment questions
- AC.L1-b.1.iiiExternal ConnectionsLimit use of external systems and services to those you trust and authorize.6 assessment questions
- AC.L1-b.1.ivControl Public InformationReview content before posting publicly; don’t share FCI.5 assessment questions
Identification & Authentication
2 controlsMedia Protection
1 controlPhysical Protection
2 controlsSystems and Communications Protection
2 controlsSystems and Information Integrity
4 controls- SI.L1-b.1.xiiFlaw RemediationApply updates and fix flaws promptly.6 assessment questions
- SI.L1-b.1.xiiiMalicious Code ProtectionInstall and maintain antivirus/endpoint protection everywhere.2 assessment questions
- SI.L1-b.1.xivUpdate Malicious Code ProtectionEnsure antivirus and malware protections are always current.1 assessment question
- SI.L1-b.1.xvSystem & File ScanningRun scheduled scans and real-time scans for files and downloads.3 assessment questions