What do we need to do to achieve a Level 1 Cybersecurity Maturity Model Certification (CMMC)?

What is CMMC Level 1?

In this video, CastleLock’s Chief Compliance Officer, Coby Pennington introduces us to the Cybersecurity Maturity Model Certification Level 1. This is the minimum requirement to do business with the Department of Defense and exactly matches the 15 controls called out in FAR 52.204-21 and 17 of the NIST SP 800-171r1 controls.
Companies that wish to do business with the Department of Defense and are required to meet the CMMC Level 1 certification requirement will need to make sure they have a firewall, use antivirus or malware protection, know who their users are and only give them access to what’s required and have an asset inventory. Additionally, facility or server room visitors need to be managed with a sign in sheet or similar and computer equipment needs to be properly secured from unauthorized physical access.

Not one solution fits all scenarios. Reach out to CastleLock for a CMMC pre-audit assessment. With decades of experience in achieving cybersecurity, compliance and cloud solutions, CastleLock has been helping companies achieve DFARS cyber objectives since 2015.