CMMC Level 1 self-attestation readiness.

Fifteen questions covering the seventeen basic safeguarding practices from FAR 52.204-21. Takes about four minutes. For organizations handling Federal Contract Information (FCI) but not Controlled Unclassified Information.

At the end you'll see your estimated score, your readiness tier, and where to focus. CMMC Level 1 is self-attested, so the bar is lower than Level 2 — but the practices still need to be real.

If you're not sure whether you need Level 1 or Level 2, the rule of thumb: if your contracts reference DFARS 252.204-7012 or CUI, you need Level 2. If only FAR 52.204-21, Level 1 is the bar.