What CMMC Level 1 covers
CMMC Level 1 = 17 practices across 6 domains tied to FAR 52.204-21 (Basic Safeguarding of Covered Contractor Information Systems). Required for ANY DoD contractor or subcontractor handling FCI (Federal Contract Information).
L1 is pass/fail. All 17 must be MET to certify. Self-assessment is annual. Score is posted to SPRS, then affirmation is submitted by a senior official within 30 days.
How this tool calculates your score
L1 is binary at the practice level, each practice is MET or NOT. The "PARTIAL" tag is for your own gap tracking (it doesn't count toward MET in CMMC scoring; it just means you haven't fully closed the gap yet).
SPRS score for CMMC L1 is informational (the actual SPRS for L2 scores 0-110). For L1 you'd report your overall compliance status (Compliant / Not Compliant).
Who built this
Built by Sentinelle Systems LLC, federal contracting firm in Virginia. Tom holds AWS Security Specialty, Security+, CySA+; CISSP in progress. 11+ years cybersecurity practice including MSP/MSSP (Arete), financial services (COCC), email security (Barracuda), and federal contracting (Telos / DOD).