CMMC Level 1 Readiness Audit

gov-cmmc-level-1 · v1.1.0 · paid

Evaluates code-level controls aligned with CMMC Level 1 (FAR 52.204-21) — access control, identification and authentication, system protection, communications security, and information integrity for projects handling Federal Contract Information (FCI).

Access Control

access-control · weight 0.25

System access limited to authorized users and processes
ab-001549
critical
Transactions and functions limited to authorized users
ab-001550
high
External connections verified and controlled
ab-001551
medium
Public-facing content controlled, no FCI exposed
ab-001552
medium
Role-based access separates privileged from regular users
ab-001553
high

Identification & Authentication

identification-auth · weight 0.2

Users uniquely identified before access
ab-001554
critical
Identity verified (passwords, sessions) before access
ab-001555
critical
Password policy meets NIST 800-63B guidelines
ab-001556
high

Media Protection

media-protection · weight 0.1

FCI sanitized before disposal or reuse of digital media
ab-001557
high
Sensitive data not persisted in browser storage unencrypted
ab-001558
medium

Physical Protection

physical-protection · weight 0.1

Physical facility access limited to authorized individuals
ab-001559
info
Visitors escorted and monitored
ab-001560
info
Physical access logs maintained
ab-001561
low
Physical access devices managed
ab-001562
low

System & Communications Protection

system-comms · weight 0.15

Communications monitored and controlled at system boundaries
ab-001563
high
Public-accessible subnetworks separated from internal networks
ab-001564
high
Data encrypted in transit (TLS 1.2+)
ab-001565
high

System & Information Integrity

system-integrity · weight 0.2

Known vulnerabilities identified and remediated timely
ab-001566
high
Protection against malicious code (input validation, dependency integrity)
ab-001567
critical
Security alerts monitored and acted upon
ab-001568
medium
System and software updates applied timely
ab-001569
low