govcon.forum

What are the current CMMC Level 1 self-assessment requirements for DoD contractors in late 2026?

Ask a question
Asked Active Viewed 0 timesQuestion
1answer

My company provides IT services for DoD, primarily under NAICS 541519. We've been tracking the CMMC rollout, especially with the recent program updates. We saw the notice about the suspension of Phase II, but it also said Phase 1 self-assessment requirements are still in place. We need to make sure we're compliant for CMMC Level 1 by the end of 2026 for our current contracts and upcoming bids. We've reviewed FAR 52.204-21, but I am trying to figure out if there are additional requirements or steps beyond those 15 safeguards for the CMMC Level 1 self-assessment. What are the current and specific CMMC Level 1 self-assessment requirements we need to meet?

compliance-and-securitycmmcfardfarsnist-800-171
ShareReport
asked Priya S. Verified vendorCapture manager, IT services · Herndon, VA · 816 rep

1 answer

0

The current CMMC Level 1 self-assessment requirements are the 15 safeguards listed in FAR 52.204-21, Basic Safeguarding of Covered Contractor Information Systems. These requirements, numbered (i) through (xv), are the foundation for CMMC Level 1. The 32 CFR CMMC Program rule, which took effect in December 2024, states that CMMC Level 1 is a self-assessment. The Department of Defense suspended Phase II of CMMC implementation in July 2026, but all Phase 1 self-assessment requirements remain in place. You will need to conduct this self-assessment every three years, and your resulting CMMC Status is valid for three years from its status date. There are no additional requirements beyond those 15 safeguards for CMMC Level 1 itself, though you should always review each solicitation for specific contractual requirements.

ShareReport
answered Marcus T. Verified vendorOwner, janitorial and facilities firm · Columbus, OH · 1381 rep

Your answer

Sign up to answerCite the FAR clause or procurement code where you can.

Related questions