FAR 52.204-21 · 15 Controls · SPRS-Ready · Policy Mini-Set
🎯
CMMC Level 1 — FAR 52.204-21 Self-Assessment
Assess all 15 Level 1 controls, document your compliance status against each objective, and generate a policy mini-set. For organizations handling Federal Contract Information (FCI) that do not process, store, or transmit Controlled Unclassified Information (CUI).
$497 — Prospect
Globe-America Consulting — Level 1 Compliance
Level 1 Self-Assessment Tool
FAR 52.204-21 requires all federal contractors handling FCI to implement 15 basic safeguarding practices. This tool walks through each control, documents your compliance status against every assessment objective, and generates a formatted assessment summary to support your annual senior official affirmation in SPRS. The Policy Mini-Set tab generates compliant policy language for all 6 Level 1 domains.
⚠
Pass / Fail Assessment — All 15 Controls Required
CMMC Level 1 is a binary pass/fail self-assessment under FAR 52.204-21. To achieve compliance, your organization must satisfy ALL 15 controls. A single objective scored as "Not Met" or "Partially Met" results in a failed assessment. There is no partial credit at Level 1.
Unlike CMMC Levels 2 and 3, Plans of Action and Milestones (POA&Ms) are NOT permitted at Level 1. Every control must be fully implemented at the time of self-assessment and annual senior official affirmation in SPRS. If any control is not met, remediate first, then re-assess before submitting.
⚙ Organization Information
⚠ SPRS Affirmation Reminder
Level 1 requires an annual self-assessment with a senior official affirmation submitted to the Supplier Performance Risk System (SPRS) via PIEE (piee.eb.mil). Level 1 does NOT generate a numeric SPRS score — that applies only to Level 2 NIST SP 800-171 assessments. At Level 1, your affirmation states that all 15 FAR 52.204-21 controls are met. This tool documents the underlying compliance status. You must submit the affirmation yourself through PIEE. Submitting a false affirmation creates False Claims Act liability. Assess each control honestly based on what is actually implemented.
0
Compliance Status
0
Controls Met
15
Gaps / Partial
0%
Completion
📄 Level 1 Policy Mini-Set
FAR 52.204-21 requires that organizations implement basic safeguarding policies. These 6 policies cover all Level 1 control domains. Review and customize the pre-written language to match your environment, then export a formatted Policy Mini-Set document. Your organization name from the Assessment tab is automatically applied.
Ready to Move from Level 1 to Level 2?
If you begin handling CUI or receive a contract requiring CMMC Level 2, Globe-America's Compliance Foundation engagement covers the full gap analysis, SPRS scoring across all 110 controls, SSP development, and C3PAO readiness roadmap.
