CMMC Level 1 - FAR 52.204-21

Get CMMC Level 1 Certified

in 4-8 weeks

Level 1 is the entry point for all DoD contractors handling Federal Contract Information. 17 foundational practices. Annual self-assessment. We get you there fast - and keep you there.

17 Practices

Self-assessment allowed

SPRS submission support

Annual renewal included

WHO NEEDS LEVEL 1

Does this apply to you?

Level 1 is determined by your contract - specifically whether it involves Federal Contract Information

You need Level 1 if....

Your DoD contract includes FAR clause 52.204-21.

You receive, store, or transmit any information the government provided under contract that is not publicly available.

You are a prime or subcontractor in the DoD supply chain.

You need Level 2 if....

Your DoD contract includes DFAR clause 252.204-7012 or 252.204-7021

You handle technical drawings, export-controlled data, or other Controlled Unclassified Information.

Your prime contractor flows CUI down to you

WHAT WE DELIVER

Everything included in your engagement

No hidden extras. No surprise scope creep. Here is exactly what you get.

Gap assessment report

SPRS Score calculation

Remediation Guidance

Policy templates

SPRS submission support

Annual reassessment

Practice-by-Practice evaluation - Met, Partial, or Not Met - with evidence notes for every finding

Your exact self-assessment score with a breakdown of how each practice contributed

Step-by-step fix instructions for every gap - written for your IT person or MSP to implement

Ready-to-use written policies for access control, passwords, media disposal, and physical access

We walk you through submitting your score to the Supplier Performance Risk System Portal

12-month reminder and reassessment support so your SPRS score stays current and compliant

INVESTMENT

Simple, transparent pricing

Scoped to your environment size. No surprise costs.

Small Environment

Most Popular

Gap assessment only

Full preparation

Up to 25 users. Single Location. Existing IT Support in place

Up to 50 users, includes all deliverables plus policy templates and remediation support.

Gap assessment report

SPRS Score Calculation

SPRS submission walkthrough

Everything in Gap Assessment

Policy library (4 templates)

Remediation Guidance

Annual reassessment included

$1,500-$2,500

$3,500-$5,000

Ready to check Level 1 off your list?

Most businesses complete Level 1 in 4-8 weeks. Book a free 300-minute consultation and we will tell you exactly where you stand today.

RVA Tech Visions

Technology security and compliance advisory for small and mid-size businesses in the Richmond, VA metro area and beyond.

© 2025 RVA Tech Visions, LLC - Richmond VA

rvatechvisions.com

Services

Company

About Us