If you handle Federal Contract Information on a DoD contract or subcontract, you need a Level 1 self-assessment in SPRS and a yearly affirmation. This kit walks you through it.
DoD began putting CMMC requirements into solicitations and contracts on November 10, 2025. Level 1 covers the 15 basic safeguarding requirements from FAR 52.204-21. You assess yourself, but every requirement must be met before you affirm. There is no plan of action option at Level 1, and a senior official signs off every year.
This kit explains each requirement in plain English, shows what “met” looks like at a small company, and gives you the workbook, policy and evidence checklist to prove it.
Every document comes as an editable Word file and as a PDF.
Small manufacturers, suppliers and service firms that handle FCI but not Controlled Unclassified Information (CUI).
It is not an assessment or certification. Level 1 is a self-assessment your company performs and affirms itself. Core-Infosec is not a C3PAO. If you handle CUI, you need Level 2, and this kit is not enough.
$149, one-time purchase. Instant download after payment.
How do I know if I handle FCI or CUI? The guide explains FCI. If documents you receive carry CUI markings, or your contract or prime says you will handle CUI, ask your prime or contracting officer in writing before relying on Level 1.
Can you assess us? A Level 1 self-assessment is always yours, even when someone helps. Core-Infosec can help you prepare.
What format are the files? Word (.docx) and Excel (.xlsx) for editing, and PDF for reading.
What if it is not what I expected? Email us through the Contact Us page within 14 days and we will refund you.
Questions before you buy? Reach us through the Contact Us page.
We use strictly necessary cookies for security and sign-in, and, with your permission, analytics (Microsoft Clarity session recordings and Jetpack Stats) to improve this site. See our Privacy Policy.