🔐 Facilitated CMMC Level 1 Self-Assessment Service

Get It Right the First Time — Protect Your Contracts and Reputation

🧭 Overview

CMMC Level 1 requires annual self-assessment of 15 basic safeguarding requirements from FAR 52.204-21. These controls may seem simple—but doing them incorrectly can put your business at risk of noncompliance, contract loss, or even False Claims Act (FCA) violations.

Our Facilitated CMMC Level 1 Self-Assessment service helps your organization:

  • Interpret requirements accurately

  • Validate evidence against the 48 official assessment objectives

  • Document results in alignment with 32 CFR §170.15 and §170.24

  • Submit results to SPRS with confidence

🎯 Why It Matters

CMMC Level 1 is not optional for contractors handling Federal Contract Information (FCI).

✅ Just because Level 1 is “self-assessed” does not mean it is informal or easy.

✅ A self-assessment that lacks adequate evidence or misinterprets the requirements may result in a false attestation, exposing your company to:

  • DoD contract termination

  • Loss of award eligibility

  • Potential action under the False Claims Act (31 U.S. Code § 3729)

📘 What the Guide Requires (And We Help You Do Right)

The Assessment Guide v2.13 outlines:

  • 15 security requirements

  • 48 assessment objectives

  • Use of examine, interview, and test methods

  • Required documentation in final form (drafts not allowed)

  • Complete evidence-based justification for a finding of MET or NOT APPLICABLE

  • 100% Compliance - no partial credit - you either meet Level 1 requirements or you don’t

🛠️ What’s Included in the Service

🔍 Pre-Assessment Planning

  • Scoping session to define assessment boundaries (per 32 CFR §170.19)

  • Asset identification (systems processing, storing, or transmitting FCI)

  • Identification of potential external service providers (ESPs)

🧩 Requirements & Evidence Review

  • Walkthrough of all 15 requirements

  • Detailed review of your evidence against all 48 assessment objectives

  • Mapping your existing policies, procedures, and configurations

🧾 Evidence Collection & Validation

  • Identify gaps in documentation (e.g., no media sanitization procedure)

  • Help draft acceptable final-form evidence if needed (as permitted)

  • Advise on best practices for examine, interview, test methods

🗂️ SPRS & Documentation Package

  • Prepare the CMMC Level 1 Self-Assessment Report

  • Support the SPRS score submission (including date, score, and system security plan)

  • Document any Not Applicable or Enduring Exceptions per guidance

🧑‍🏫 Team Awareness Session (Optional)

90-minute session for your internal stakeholders on:

  • The legal responsibility of self-assessments

  • The connection to DFARS and FCA

  • Evidence handling and audit readiness

⚖️ Legal & Contractual Risk Awareness

Misrepresenting compliance is a False Claims Act risk.

If you assert a SPRS score of “110” but cannot show evidence that satisfies all applicable objectives, you risk:

  • Suspension or debarment

  • Breach of contract

  • FCA penalties, including treble damages

We help ensure your self-assessment stands up to scrutiny from DoD, primes, and auditors.

💡 Ideal For:

  • Small to mid-sized contractors who want to “get it right”

  • Firms under not yet handling CUI or with at least 1 enclave only handling FCI

  • Subcontractors responding to prime flow-downs

  • Companies preparing to scale to CMMC Level 2

💼 Deliverables

  • CMMC Level 1 Self-Assessment Summary Report

  • Annotated Evidence Matrix (mapped to 48 objectives)

  • Gap remediation guidance (if needed)

  • [Optional] Executive summary slide deck for leadership

💰 Pricing

Tiered flat-rate options based on size of assessment boundary and need for remediation support. Contact us for a fixed quote.

🚨 Bottom Line

“It’s just a self-assessment” is not a defense.

This is your official representation to the government.

Let us help you do it right — before someone else tells you it’s wrong.

🔹 Why Choose Evolved Cyber for Your Level 1 Self-Assessment?

Our team includes Certified CMMC Assessors who’ve led both Joint Surveillance and formal CMMC assessments. That means we know exactly what evidence matters — and how to help you align your self-assessment with what assessors and primes expect.

Whether you’re new to CMMC or just want to validate you’re doing it right, we’ll guide you through every step with clarity, accuracy, and purpose.

✅ Real-world assessment experience

✅ Evidence-based approach aligned to CMMC v2.13

✅ Trusted by small and mid-sized contractors across the DIB

Let’s make sure your Level 1 self-assessment holds up under scrutiny.

Contact us today