Level 1 in a Box Materials

CMMC Level 1 in a Box was created to help small companies develop a cybersecurity compliance program for CMMC Level 1 on their own, without having to pay for consulting services. However, implementing a cybersecurity compliance program – even for CMMC Level 1 – requires some IT knowledge. If your company outsources its IT services, you need to work with that company to develop your cybersecurity program.

CMMC Level 1 in a Box can also be used by any company wanting to develop a cybersecurity program for any level of compliance – the tool makes it easy to get started.

The CMMC Level 1 Assessment Guide provides guidance to assessors for conducting a CMMC Level 1 assessment.

Contents of CMMC Level 1 in a Box

  • CMMC Level 1 Guide – an Excel workbook that can be used to manage the development of your cybersecurity program and guide you through the necessary tasks.
    • Network diagram
    • Risk assessment
    • IT Asset Inventory
    • Gap analysis
    • Procedure for each practice
    • Plans to achieve compliance

The Guide also provides a template to help attain and maintain compliance.

  • Data Security Policy Template – CMMC Level 1 does not require that you develop a data security policy, but it is highly recommended, and the template is a tool you can use to develop your policy.

If you are, or plan to be in the Department of Defense supply chain, you must comply with cybersecurity regulations. To help North Carolina defense contractors understand and implement cybersecurity regulations, multiple State entities and organizations that support the defense industry have established the NC Interagency Cybersecurity Coordinating Committee (I3C). The goals of the committee are to provide defense contractors with 1) up to date and accurate information about cybersecurity regulations and requirements; 2) effective tools they can use to assess their current level of compliance in preparation for DoD certification; and 3) access to reputable companies, institutions and other resources to help them bridge their assessment, compliance, workforce and technical gaps to cybersecurity compliance. 

CyberNC.us is managed by the North Carolina Military Business Center through the North Carolina Interagency Cybersecurity Coordinating Committee (I3C).
Support provided by Fayetteville Technical Community College and NC State University's Secure Computing Institute.

The NCMBC and the I3C are not representatives of the DoD or the CMMC Accreditation body. This website is meant to be a community resource for cybersecurity compliance information.

Copyright 2020, North Carolina Military Business Center.  All Rights Reserved.