Why This Matters
If you’re a small defense supplier, CMMC Level 1 is no longer optional. You must self-attest annually in SPRS — and the DoD can ask for your evidence at any time.
The problem? Most “checklists” are vague or incomplete. This one is written by assessors-aware consultants who know what actually passes muster.
Need confidence beyond the checklist? PRAETORSEC helps small suppliers structure evidence, close gaps, and prepare for assessor-style reviews.
👉 Book a consultation today and make your self-attestation simple and defensible.
- Machine shops
- IT integrators
- Small manufacturers
- Professional services handling
Federal Contract Information (FCI)
If you’re bidding on DoD contracts and need to self-attest at Level 1, this checklist is for you.
✔ All 17 Level 1 practices in plain English
✔ Specific examples of what
“implemented” really looks like
✔ Evidence templates (screenshots, exports, logs) you can replicate
✔ Practical binder structure you can follow tomorrow