Level 1 and FCI
CMMC Level 1 for contractors who handle only FCI: the 15 requirements, the yearly affirmation, and what primes ask for.
Find your next step
RSS feed5 guides
- Program status
Do I still need CMMC after the Phase 2 pause?
Yes. The pause cancelled the November 2026 certificate deadline, not the security work. What stopped, what still applies, and how to spend money now.
Kyle Fahey - Primes & contracts
What can a prime contractor require of me during the CMMC pause?
Three layers: what DoD requires through your contract clauses, what you already signed, and what the prime simply prefers. Only the first two bind you.
- Scope & CUI boundaries
Is my contract information FCI or CUI?
Marked, or named as CUI in the contract: Level 2, 110 requirements. Other nonpublic contract info is FCI: Level 1, 15. How to tell, and the email to send the prime.
Kyle Fahey - Program status
CMMC Levels 1, 2, and 3: what is the difference?
Your level is set by the information your customer sends you, not your size. Level 1 is 15 safeguards, Level 2 is 110 requirements, Level 3 is rare.
Andrew Erne - Machine shops
What does CMMC really cost a small machine shop, and is defense work still worth it?
The Pentagon's CMMC cost estimates leave out the part that costs money. Here's what a 5 to 50 person shop actually pays, where it goes, how to shrink it, and an honest rule for deciding whether to stay.
Kyle Fahey
