Readiness Assessment
CMMC · Level 1 · Self-Assessment

Is your organization ready for CMMC Level 1?

CMMC Level 1 (Foundational) requires annual self-assessment against 17 practices from NIST SP 800-171 Rev. 2 for any organization handling Federal Contract Information (FCI). This assessment gives you a clear readiness picture across all 6 control families — and flags exactly where your gaps are.

Time required
Approximately 5 minutes
Questions
13 targeted items
Framework basis
NIST SP 800-171 Rev. 2
Cost
Complimentary

What you'll get

On-screen results delivered the moment you complete the assessment.

Overall Readiness Score
01

A single headline percentage showing how close you are to CMMC Level 1 self-attestation readiness.

Control Family Breakdown
02

Readiness across all 6 control families so you know exactly where to focus your remediation effort.

Prioritized Gap List
03

Specific NIST SP 800-171 control references and recommended actions for every area that needs attention.

1Contact
2Assessment
3Results

Before we begin

A few details so we can send you a copy of your results and follow up if you'd like expert guidance.

Please fill in all required fields and accept the consent notice.

Your information is used solely to deliver your results and to follow up about CMMC readiness support. You can unsubscribe at any time.

1Contact
2Assessment
3Results

CMMC Level 1 Assessment

Answer Yes, Partially, or No / Not sure for each question. All 13 must be answered to generate your results.

Progress 0 of 13 answered
Please answer all 13 questions before continuing.
1Contact
2Assessment
3Results

Your CMMC Level 1 Readiness Results

Prepared for

—
Readiness
—

—

—

Readiness by Control Family

A ≥80% family score indicates readiness for that control area.

Identified Gaps & Recommended Actions

— control area(s) flagged for attention.

Next Steps

  1. This assessment provides a general indication of CMMC Level 1 readiness. It is not a substitute for a formal self-assessment against all 17 NIST SP 800-171 Rev. 2 practices required for Level 1.
  2. CMMC Level 1 (Foundational) requires annual self-assessment. All 17 practices must be implemented. Any identified gaps should be addressed prior to self-attesting compliance.
  3. CMMC Level 1 applies to organizations handling Federal Contract Information (FCI). If your contracts involve Controlled Unclassified Information (CUI), you will need CMMC Level 2 certification, which requires third-party assessment.
  4. Carbide can help you close gaps, build evidence artefacts, and prepare for self-attestation — or Level 2 third-party assessment — with confidence.
Schedule an Assessment Review