CMMC Readiness and Compliance
Prepare for CMMC Level 1 or CMMC Level 2
Whether you are encountering CMMC for the first time, preparing for Level 1 or facing more extensive Level 2 requirements, BrickTech can help you understand where you stand and what needs to happen next.
What Is CMMC?
CMMC, or Cybersecurity Maturity Model Certification, is a Department of Defense program for assessing whether defense contractors and subcontractors have implemented required protections for Federal Contract Information and Controlled Unclassified Information.
The required CMMC level and assessment type are identified in the applicable solicitation, contract or subcontract.
CMMC includes three levels, with requirements based on the information an organization’s systems process, store or transmit.
Understanding CMMC Levels 1 and 2
CMMC Level 1 addresses the basic safeguarding of Federal Contract Information through 15 security requirements from FAR 52.204-21.
CMMC Level 2 addresses the broader protection of Controlled Unclassified Information through the 110 security requirements in NIST SP 800-171 Revision 2.
BrickTech supports organizations preparing for either level, including those encountering CMMC for the first time and those moving from Level 1 to Level 2.
Who Is This For?
This page is for defense contractors, subcontractors, and businesses that are being asked about CMMC or want to understand their current cybersecurity readiness.
It may be useful if a solicitation, contract, customer or prime contractor references CMMC; your organization handles or may handle Federal Contract Information or Controlled Unclassified Information; you are preparing for Level 1 or Level 2; or you are unsure which requirements apply.
What Is your CMMC score?
Use our CMMC Readiness Tool to get a clearer picture of your current readiness.
What Your Readiness Grade Means
A higher number suggests your business has many foundational practices in place. A moderate or limited result (<80%) indicates that your business has gaps, missing documentation, or areas that should be reviewed before responding to CMMC-related requests.
Your result is intended as a starting point. It is not a formal audit, certification, or guarantee of compliance.
Get Help With CMMC Readiness
BrickTech helps organizations understand and prepare for CMMC Level 1 and Level 2 requirements.
BrickTech can help with:
- CMMC Level 1 readiness and self-assessment support
- CMMC Level 2 readiness and assessment preparation
- CMMC compliance support
- Cybersecurity gap review
- Support addressing identified technology gaps
- Next-step planning
If your organization is unsure which CMMC level applies, BrickTech can help you understand the requirements stated in your solicitation or contract. Your contracting officer or prime contractor should confirm the required level and assessment type.
Frequently Asked Questions
CMMC stands for Cybersecurity Maturity Model Certification. It is a Department of Defense program for assessing whether defense contractors and subcontractors have implemented required protections for Federal Contract Information and Controlled Unclassified Information.
An organization needs a particular CMMC status when an applicable Department of Defense solicitation, contract or subcontract requires it. The required level and assessment type should be confirmed through the applicable contract documents, contracting officer or prime contractor.
Federal Contract Information, or FCI, is information not intended for public release that is provided by or generated for the federal government under a contract to develop or deliver a product or service. It does not include information the government has made public or simple transactional information used to process payments.
CMMC Level 1 addresses the basic safeguarding of Federal Contract Information. It includes 15 security requirements from FAR 52.204-21 and requires an annual self-assessment and annual affirmation.
CMMC Level 2 addresses the protection of Controlled Unclassified Information. It uses the 110 security requirements in NIST SP 800-171 Revision 2.
The CMMC framework provides for Level 2 self-assessments and certification assessments performed by authorized or accredited C3PAOs. The applicable assessment type depends on the solicitation or contract and current Department of Defense implementation policy.
No. This checklist provides a preliminary review of foundational Level 1 practices. Level 2 readiness requires a detailed evaluation of the 110 security requirements in NIST SP 800-171 Revision 2.
No. This checklist is not a formal assessment, certification or guarantee of compliance. It is a preliminary Level 1 readiness tool designed to identify foundational practices that may require further review.
Yes. BrickTech can help your organization understand the requirements stated in its solicitation or contract and prepare for the applicable level. Your contracting officer or prime contractor should confirm the required CMMC level and assessment type.
Yes. BrickTech can help your business understand which CMMC requirements may apply and what steps may be needed next.
After completing the checklist, you will receive a preliminary Level 1 readiness grade. You can also request your readiness report and ask BrickTech to contact you about a CMMC Readiness Review.
“Not sure” answers may indicate uncertainty, missing documentation, or areas that need review. A CMMC Readiness Review can help clarify where your business stands and what steps may be needed next.