Level 1 focuses on the protection of FCI and consists of only practices that correspond to the basic safeguarding requirements specified in 48 CFR 52.204-21, commonly referred to as the FAR Clause

Level 1 Scoping Guidence
Level 1 Self-Assessment Guide
Level 1 Training

AC.L1-3.1.1 Authorized Access Control

AC.L1-3.1.2 Transaction & Function Control

AC.L1-3.1.20 External Connections

AC.L1-3.1.22 Control Public Information

IA.L1-3.5.1 Identification

IA.L1-3.5.2 Authentication

MP.L1-3.8.3 Media Disposal

PE.L1-3.10.1 Limit Physical Access

PE.L1-3.10.3 Escort Visitors

PE.L1-3.10.4 Physical Access Logs

PE.L1-3.10.5 Manage Physical Access

SC.L1-3.13.1 Boundary Protection

SC.L1-3.13.5 Public-Access System Separation

SI.L1-3.14.1 Flaw Remediation

SI.L1-3.14.2 Malicious Code Protection

SI.L1-3.14.4 Update Malicious Code Protection

SI.L1-3.14.5 System & File Scanning

CMMC Level 2