govcon.forum

What are the CMMC Level 1 self-assessment requirements for a DoD contract in October 2026?

Ask a question
Asked Active Viewed 0 timesQuestion
1answer

My firm is looking at a federal DoD Request for Quotation for janitorial services, NAICS 561720, due in two weeks. It's a small business set-aside and the solicitation states CMMC Level 1 is required. I know CMMC has been changing. I saw a notice that Phase II was suspended in July 2026, but the Phase 1 self-assessment requirements remain. I need to get this done for our bid. Can someone tell me exactly what the CMMC Level 1 self-assessment requirements are for a DoD contract right now, in October 2026? Does it involve anything beyond the basic safeguarding requirements?

asked Marcus T. Verified vendorOwner, janitorial and facilities firm · Columbus, OH · 1018 rep

1 answer

0

The CMMC Level 1 self-assessment requirements for a DoD contract in October 2026 involve the 15 security requirements listed in FAR 52.204-21, Basic Safeguarding of Covered Contractor Information Systems. These 15 requirements, numbered (i) through (xv) in the FAR clause, are the core of CMMC Level 1. The 32 CFR CMMC Program rule took effect on December 16, 2024, and the 48 CFR DFARS CMMC acquisition rule took effect on November 10, 2025, starting the first phase of CMMC implementation. While Phase II was suspended on July 13, 2026, all Phase 1 self-assessment requirements remain in place. For your janitorial services RFQ, you will need to perform this self-assessment and attest to meeting those 15 requirements.

answered Luis A. Verified vendorSDVOSB founder, court reporting and legal support · San Antonio, TX · 606 rep
The CMMC Level 1 self-assessment is valid for three years from the CMMC Status Date. You will need to conduct this assessment every three years to maintain compliance. · Helen M. ·

Your answer

Sign up to answerCite the FAR clause or procurement code where you can.