CMMC Level 1 Compliance

Win and keep defense work with confidence. IT Hawaii helps Hawaii contractors meet CMMC Level 1, from putting the 15 basic safeguards in place to the annual self-assessment and affirmation.

Give us a call
Two IT Hawaii techs smiling beside a server rack

What CMMC Level 1 asks of your firm

CMMC Level 1 applies to Department of Defense contractors that handle Federal Contract Information. It requires an annual self-assessment and an annual affirmation in the Supplier Performance Risk System (SPRS) that you meet the 15 security requirements in FAR clause 52.204-21. Since November 10, 2025, Department of Defense solicitations can require it.

IT Hawaii technician working at a desk with two monitors

Meet all 15 requirements

Level 1 doesn’t allow a plan of action for unmet requirements, so every one has to be in place. We put the safeguards in place, such as access control, user authentication, patching and malware protection, then write the policies and documentation behind your answers.

Built for Hawaii contractors

We work with construction contractors, engineering and architecture firms, subcontractors and suppliers, and professional services firms with Department of Defense contracts, anywhere in Hawaii. Choose a one-time CMMC Posture Improvement Project, or make CMMC part of a cybersecurity program we build and manage with you.

Let's talk
IT Hawaii team meeting around a conference table with a wall screen

What CMMC Level 1 help includes

The safeguards, the documentation and the yearly steps, done with you.

Laptop security dashboard showing access control, updates and malware protection turned on, beside blueprints and a hard hat

Basic safeguards

The 15 security requirements in place, such as access control, user authentication, patching and malware protection.
Laptop showing a Level 1 self-assessment with 15 of 15 requirements met, beside a hard hat and a tape measure

Annual self-assessment

Help checking every requirement each year, with the documentation behind your answers.
Laptop showing an annual affirmation form with Yes selected, beside rolled blueprints and a hard hat

SPRS affirmation

Help with your annual affirmation in the Supplier Performance Risk System.
Binder open to a cybersecurity policies page beside rolled blueprints and a hard hat

Policies and documentation

Written policies and records that show how your firm meets each requirement.

Ready for your next defense contract?

Tell us about your contracts and your IT setup. IT Hawaii helps with CMMC Level 1 anywhere in Hawaii. A real person will reach out within one business day.

Talk to us!

Frequently asked questions

1
What is CMMC Level 1?

CMMC Level 1 is the Department of Defense’s cybersecurity level for contractors that handle Federal Contract Information. It requires an annual self-assessment and an annual affirmation in SPRS that you meet the 15 security requirements in FAR clause 52.204-21.

3
Can we use a plan of action for requirements we haven’t met?

No. Plans of action aren’t allowed at Level 1, so all 15 requirements must be in place before you affirm.

5
Can we do CMMC as a one-time project?

Yes. You can hire IT Hawaii for a one-time CMMC Posture Improvement Project, or make CMMC part of a cybersecurity program that IT Hawaii builds and manages with you.

2
Who needs CMMC Level 1?

Companies with Department of Defense contracts that handle Federal Contract Information, including Hawaii construction and engineering firms on defense projects. Since November 10, 2025, Department of Defense solicitations can require it.

4
What CMMC work does IT Hawaii do?

IT Hawaii puts the 15 security requirements in place, helps with your annual self-assessment and SPRS affirmation, and writes the policies and documentation behind your answers.

6
Do you help with CMMC outside Oahu?

Yes. IT Hawaii helps with CMMC Level 1 compliance anywhere in Hawaii.