Home / Frameworks / CMMC / Level 1

CMMC v2.0

Cybersecurity Maturity Model Certification for DoD contractors

110 All 17 Level 1 93 Level 2

Showing 17 practices in Level 1 (FCI)

Foundational - Basic safeguarding of Federal Contract Information (FCI)

AC — Access Control (4 practices)

AC.L1-3.1.1Authorized Access Control

AC.L1-3.1.2Transaction & Function Control

AC.L1-3.1.20External Connections

AC.L1-3.1.22Control Public Information

IA — Identification and Authentication (2 practices)

IA.L1-3.5.1Identification

IA.L1-3.5.2Authentication

MP — Media Protection (1 practices)

MP.L1-3.8.3Media Disposal

PE — Physical Protection (4 practices)

PE.L1-3.10.1Limit Physical Access

PE.L1-3.10.3Escort Visitors

PE.L1-3.10.4Physical Access Logs

PE.L1-3.10.5Manage Physical Access

SC — System and Communications Protection (2 practices)

SC.L1-3.13.1Boundary Protection

SC.L1-3.13.5Public-Access System Separation

SI — System and Information Integrity (4 practices)

SI.L1-3.14.1Flaw Remediation

SI.L1-3.14.2Malicious Code Protection

SI.L1-3.14.4Update Malicious Code Protection

SI.L1-3.14.5System & File Scanning