CMMC Level 1 Self-Assessment Kit
Fifteen Requirements, Explained for a Small Shop
For a supplier that handles Federal Contract Information (FCI) and must complete a Level 1 self-assessment and affirm it every year. The kit walks through the 15 safeguarding requirements in Federal Acquisition Regulation (FAR) clause 52.204-21, shows what evidence to gather, supplies the policies and a self-assessment workbook, and explains how a senior official affirms and how the result is entered in the Supplier Performance Risk System (SPRS). Plain language, no information technology staff needed. Pay once, no subscription.
Delivered by email within minutes as individual files. Full refund within the 20 day refund window if a file will not open or the kit is not as described. This kit supports your own self-assessment and does not give you a CMMC certification.
Made for a supplier that handles only Federal Contract Information
Federal Contract Information is information the government provides or you generate under a contract that is not meant for public release. If your contract involves only Federal Contract Information, it will usually call for Level 1. The contract or solicitation names the level. The person who ends up responsible for security usually has another job as well, and the kit gives that person a clear path from the first question to the signed affirmation.
Owners and office managers
You handle information technology yourself or call an outside provider when something breaks. You need to know what each requirement means in everyday terms and what proof to keep.
Suppliers who took the free starter
You used the free Level 1 starter, found requirements you could not mark as met, and want the walkthrough, evidence list, and policies that close the gaps.
Subcontractors asked by a prime
A prime contractor asked for your Level 1 result or your affirmation date. The kit helps you complete the self-assessment and keep the records behind it.
Not the right fit: companies that handle Controlled Unclassified Information, who need the Level 2 Kit, and consultants or managed service providers who want to use the kit with several clients, who need a separate license for each client company. Each client license costs the same as the kit: $297 for Level 1 and $497 for Level 2. Anyone looking for legal advice should speak with qualified counsel.
The files, numbered in the order to use them
Eight files and a Source Library: five editable Word files, one Excel workbook, two guides in Portable Document Format (PDF), and a Source Library of official documents that arrives as one zip file. Every file name starts with a number, so the files sort in reading order when you save them to one folder.
- Word
01 Read Me First
Start here. What is in the kit, the order to use it, a time estimate, a four-week plan, a map from each requirement to the policy that covers it, and the license terms.
- Word
02 Level 1 Requirement Walkthrough
One section for each of the 15 requirements from FAR 52.204-21: the regulation text word for word, the plain-language meaning, each of the 59 assessment objectives with what to check in your own office, what good looks like, the evidence to keep, and the common gaps.
- Word
03 Level 1 Policies and Procedures
Seven short fill-in-the-blank policies that cover the 15 requirements, with logs and forms, ready to edit and adopt as your own.
- Excel
04 Level 1 Self-Assessment Workbook
Instructions, an Assessment tab for all 59 objectives that rolls up to a result, an Evidence Tracker with a suggested evidence list for each requirement, an internal Remediation Plan, and an Affirmation Checklist.
- Word
05 Remediation Plan Template
A paper version of the internal fix list for any requirement you cannot yet mark as met, with worked examples and a close-out checklist. It is not a Plan of Action and Milestones, which Level 1 does not allow.
- Word
06 SPRS Entry and Annual Affirmation Guide
Step-by-step guide to the senior official's affirmation and to entering the result in SPRS, including what to have ready, what the affirmation means, and a suggested annual calendar.
- PDF
07 Level 1 Self-Assessment Guide
A short branded summary of Level 1: the rules, the 15 requirements, the path from start to affirmation, and the most common gaps. Use it to brief your owner or your senior official.
- PDF
08 Level 1 Proof and Sources
Where every rule in the kit comes from. A register lists each statement a buyer may be challenged on, with the exact official wording, links to the official text and to an archived copy, and the order of authority for when someone tells you something different.
- Zip file
Source Library
The official public documents the kit cites, such as Part 170 of Title 32 of the Code of Federal Regulations (CFR) and FAR 52.204-21, with an index of official links, archived links, and a fingerprint for each file, so you can read the rules offline.
Every rule in the kit links to its official source. Every requirement row cites it, such as FAR 52.204-21 and Title 32 of the Code of Federal Regulations (CFR), Part 170, so you can check the text yourself. A Level 1 self-assessment is a met or not met result for each of the 15 requirements. No Plan of Action and Milestones is permitted for Level 1 (32 CFR 170.15(a)(1) and 170.21(a)(1)), so a gap stays not met until it is fixed.
Three steps, from free to hands-on
Start where it costs nothing, and move up only when you need to.
Free: the Level 1 starter
Use the free Level 1 starter to see which requirements you can already mark as met.
The kit: $297
Work through the walkthrough, gather the evidence, adopt the policies, close the gaps, and complete the self-assessment.
Review or assisted help
Add a credentialed review call for $697, or move to a Guided Level 1 Package for $1,995 or a Hands-on Assessment from $9,000. The $297 you paid for the kit is credited in full.
See what the kit files look like · Compare every tier and price
This kit is do-it-yourself, and the price you pay counts toward help
The kit is a product for your company to complete on its own with the files provided. Plan for several weeks. If it becomes too confusing, you can move to our assisted service. Upgrade credit: the full amount you paid for this kit ($297) is credited toward a Guided Level 1 Package ($1,995, remote and document based, with no system access or testing), which leaves $1,698 to pay. The same credit applies to a Hands-on Assessment, where we test your actual systems (quoted per company in a written proposal, from $9,000). If you bought the kit with a review call, the full amount you paid is credited. One credit for each kit purchase. The credit is valid for 12 months from the kit purchase date and is void if the kit is refunded.
Where we work. On-site Hands-on Assessments are available in San Diego County and Orange County, and in Los Angeles County by arrangement. Outside that area, the Guided packages are available remotely. See the Guided and Hands-on page.
Published prices, one company, no subscription
CMMC Level 1 Self-Assessment Kit
All kit files, delivered by email within minutes of payment.
- Every file listed above
- Email support on using the files
- 20 day refund window described in the kit terms
Level 1 Kit + CMMC Certified Professional Review Call
The kit plus one review session of your completed workbook with Thabiti Adams, a CMMC Certified Professional. The review portion is $400 on top of the kit price. Review call: 45 minutes, with the first available time within 5 business days of purchase. The call is valid for 60 days from purchase. If the review call is not held within 60 days of purchase, and we did not cause the delay, we refund the call portion ($400) minus card processing fees.
- Everything in the kit
- One review session of your completed workbook
- Written notes of what to fix before you affirm
Purchases are processed by Stripe. See our privacy policy.
- License. One license covers one company, meaning one legal entity and all of its locations. You may adapt the templates, adopt them as your own policies, and remove the Adams Cloud and Cybersecurity header and footer from documents you adopt. The files are not stamped with your name. You may not resell or redistribute the kit. Consultants and managed service providers need a separate license for each client company. Each client license costs the same as the kit: $297 for Level 1 and $497 for Level 2. Please contact us to set one up.
- Refund. If a file will not open or the kit is not as described on this page, email thabiti@adamscloudcyber.com within 20 days of purchase for a full refund. If you have not downloaded any file, you may ask for a refund within 20 days for any reason. Because downloaded files cannot be returned, a change of mind after download does not qualify for a refund. See the kit terms.
- Review call terms. If you bought the kit with a review call and are not satisfied with the session, ask within 7 days for a free second session of up to 30 minutes. If you are still not satisfied, we refund the call portion ($400). This is not tied to a score, a pass, or a contract award. See the kit terms.
- Support. Questions about using the kit files are answered by email. Support does not include legal advice or a review of your answers, except in the call tiers.
- Seller. Adams Cloud and Cybersecurity LLC, 10006 Three Oaks Way, Santee, CA 92071. Telephone (619) 289-8064.
- Adams Cloud and Cybersecurity LLC is not affiliated with, endorsed by, or authorized by the Department of Defense, The Cyber AB, or ISACA. CMMC Certified Professional (CCP) is a credential issued to an individual by ISACA. These products are not a CMMC assessment and do not provide or imply any CMMC Status.
- Payment. Checkout is handled by Stripe. Your payment receipt comes from Stripe, and your download links come from us by email.
What the kit does and does not do
This kit does not certify you, and it is not legal advice.
No kit, review call, Guided package, or Hands-on Assessment from Adams Cloud and Cybersecurity LLC gives your company a CMMC certification, and none of them confers a CMMC Status. A self-assessment status comes only from your own completed self-assessment and affirmation, entered by your company in SPRS. Nothing here is legal advice. Ask qualified counsel about your contract and your legal exposure.
A senior official of your company affirms the result under the CMMC rule (32 CFR Part 170) and affirms continuing compliance every year. That official is responsible for the accuracy of the statement, and a false or inaccurate affirmation can create liability under the False Claims Act (Title 31 of the United States Code, sections 3729 to 3733). We cannot make the affirmation for you, and we do not enter your results in SPRS.
We do not guarantee any score or any assessment outcome. You still do the work: you answer honestly, collect the proof, and sign. Please do not send us Controlled Unclassified Information, contract documents marked for protection, or passwords.
Before you buy
What do I receive, and how?
An email with a download link for each file. The links expire after 7 days, and you can reply to that email for fresh links. Files arrive as individual Word, Excel, and PDF files.
Will this make my company CMMC certified?
No. Level 1 is a self-assessment that your company affirms. No kit or review from Adams Cloud and Cybersecurity LLC gives you a certification or confers a CMMC Status. A self-assessment status comes only from your own completed self-assessment and affirmation, entered by your company in SPRS.
Who signs the affirmation?
A senior official of your company affirms the result in SPRS and affirms continuing compliance every year. A false or inaccurate affirmation can create liability under the False Claims Act. The kit explains the steps. The affirmation is your company's responsibility.
What does the review call add?
For $697 instead of $297, you also get one session with Thabiti Adams to review your completed workbook before the senior official affirms. It is a review, not an assessment. See the kit terms.
Can I use it for more than one office?
Yes, if the offices belong to the same legal entity. One license covers one company and all of its locations.
What if it is not what I expected?
If a file will not open or the kit is not as described on this page, email thabiti@adamscloudcyber.com within 20 days of purchase for a full refund. If you have not downloaded any file, you may ask for a refund within 20 days for any reason. A change of mind after download does not qualify. See the kit terms and the example of what the files look like.
What if the kit becomes too confusing?
You can move to our assisted service. The full amount you paid for the kit ($297) is credited toward a Guided Level 1 Package ($1,995), which leaves $1,698 to pay, or toward a Hands-on Assessment, which is quoted per company from $9,000. One credit for each kit purchase. The credit is valid for 12 months from the kit purchase date and is void if the kit is refunded. On-site Hands-on Assessments are available in San Diego County and Orange County, and in Los Angeles County by arrangement. See the Guided and Hands-on page.
Built by a credentialed professional, priced in the open
A credentialed person wrote it
Thabiti Adams holds the Certified Information Systems Security Professional (CISSP), Certified Cloud Security Professional (CCSP), CMMC Certified Professional (CCP), and CompTIA Security+ credentials and has more than 18 years in information technology and cybersecurity, much of it on the Department of Defense side. He wrote this kit and answers your questions. You do not reach a call center.
Published prices
Every tier and price is on the kit comparison page. There is no sales call to find out what it costs.
One-time pricing
The kit is a one-time purchase. The only planned yearly item is the optional Annual Refresh, which is planned and not yet available. When it opens, it is one payment each year, with a reminder email 14 days before your renewal date. Nothing renews automatically.
Veteran-owned
Based in Santee, California. A Service-Disabled Veteran-Owned Small Business (SDVOSB) certified by the Small Business Administration (SBA), and a California Disabled Veteran Business Enterprise (DVBE).
Thabiti Adams
Complete Your Level 1 Self-Assessment
One company license, one price, no subscription. Full refund within the 20 day refund window if a file will not open or the kit is not as described.