Kitsap-Puget Sound Defense Industrial Base

Two Ways to Reach CMMC Level 1 Compliance

CCA-facilitated Level 1 clinics covering all 15 CMMC Level 1 practices and their 17 assessment objectives. Walk in with a compliance gap. Walk out with your SPRS compliance result and affirmation submitted.

Level 1 has been required since November 10, 2025 (Phase 1). Phase 2 (Level 2 C3PAO) begins November 10, 2026. Both tracks complete well ahead of each.

CMMC Phase 1 is in effect. If your company handles Federal Contract Information (FCI) under a DoD contract, a completed Level 1 self-assessment and SPRS affirmation are required. If you have not submitted yours yet, this clinic is built to walk you there with a CCA alongside you.

Two Tracks. One Outcome.

Same 15 practices. Same CCA guide. Same SPRS affirmation outcome. The difference is pace, not quality.

Accelerated Sprint
4-Week Program
$1,500 / company
📅 Starts Tuesday, July 21, 2026 at 2:00 PM PT
4
Sessions
5.5
Total Hours
15
Practices
Aug 11
Completes
  • In-person kickoff session (2 hours, July 21)
  • 3 online sessions of 1.5 hours each (Tuesdays)
  • All 15 Level 1 practices assessed (17 objectives)
  • Cavalry GRC Tool access included
  • Documentation templates included
  • Live SPRS compliance result entry and affirmation in the final session (Aug 11)
  • Completes August 11, keeping you current with a Phase 2 buffer
Register for 4-Week →
Comprehensive Clinic
8-Week Program
$2,500 / company
📅 Starts Thursday, July 16, 2026 at 2:00 PM PT
8
Sessions
9
Total Hours
15
Practices
Sep 3
Completes
  • In-person kickoff session (2 hours, July 16)
  • 7 online sessions of 1 hour each (Thursdays)
  • All 15 Level 1 practices assessed (17 objectives)
  • Cavalry GRC Tool access included
  • Documentation templates included
  • Live SPRS compliance result entry and affirmation in the final session (Sep 3)
  • Completes September 3, keeping you current with a Phase 2 buffer
Register for 8-Week →

Which Program Is Right for You?

Be honest with yourself on these factors. The wrong track for your readiness level wastes time and money.

Factor 4-Week ($1,500, starts Jul 14) 8-Week ($2,500, starts Jul 16)
Your IT environment is documented✓ Required. You must arrive with documentation readyNot required. We gather it together over 8 sessions
Prior CMMC or NIST 800-171 exposure✓ Recommended. The pace assumes baseline awarenessNot needed. We start from the beginning
IT support availabilityIT provider must be reachable for quick evidence pulls between sessionsWeekly cadence gives more time to coordinate with your IT team
Time available for pre-session homework2 to 3 hours per week required (non-negotiable)1 to 2 hours per week, more manageable for busy schedules
Budget$1,500 / company. Best value if you are ready$2,500 / company. More support for the investment
Desired completion dateDone August 11, Level 1 current with a Phase 2 bufferDone September 3, still well ahead of enforcement
First time going through this processPossible, but challenging without prior knowledge✓ Best fit. Built for first-timers

Not sure which fits? Email biz@ComplianceCavalry.com and we will help you decide before you register.

What Every Company Gets

Every company receives the same toolkit and CCA guidance. The difference is pace, not quality.

🎖

CCA-Facilitated Sessions

Every session is led by a CMMC Certified Assessor, the same credential that conducts official Level 2 assessments.

🛡

Cavalry GRC Tool

Full access to the Cavalry GRC Tool to track all 15 practices, attach evidence, and build the documentation package your Affirming Official needs to submit your SPRS affirmation.

📋

Documentation Templates

Policy templates, visitor logs, media disposal records, and affirmation letters, everything you need to build an evidence package from scratch.

🎯

All 15 Practices Covered

The 15 CMMC Level 1 practices from FAR 52.204-21, assessed across 17 objectives and marked Met or Not Met.

📊

Live SPRS Affirmation

The final session walks you through entering your compliance result and submitting the formal SPRS affirmation with your CCA present in real time.

📄

Affirmation Letter Template

A pre-built affirmation template your senior official can review and sign, so they understand exactly what they are attesting to in SPRS.

Clinic Schedules

4-Week Accelerated, Tuesdays

2:00 PM PT • July 21 to August 11, 2026

1
Tuesday, July 21
Kickoff: Foundation and Scoping
In-person • 2 hours • Cavalry GRC Tool setup, document packet, FCI boundary
In-Person
2
Tuesday, July 28
Access Control and Identification & Authentication
Online • 1.5 hours • AC + IA domains
3
Tuesday, August 4
Physical Protection and Media Protection
Online • 1.5 hours • PE + MP domains
4
Tuesday, August 11
SC, SI, and Live SPRS Affirmation
Online • 1.5 hours • SC + SI domains, plus live SPRS compliance result entry and affirmation
Submit

8-Week Comprehensive, Thursdays

2:00 PM PT • July 16 to September 3, 2026

1
Thursday, July 16
Kickoff: Foundation and Scoping
In-person • 2 hours • Cavalry GRC Tool setup, document packet, FCI boundary
In-Person
2
Thursday, July 23
Access Control, Part 1
Online • 1 hour • AC.L1-3.1.1 and AC.L1-3.1.2
3
Thursday, July 30
Access Control Part 2 and Authentication
Online • 1 hour • AC.L1-3.1.20 / 3.1.22, plus IA domain
4
Thursday, August 6
Physical Protection
Online • 1 hour • PE.L1-3.10.1 / 3.10.3 / 3.10.4 / 3.10.5
5
Thursday, August 13
Media Protection
Online • 1 hour • MP.L1-3.8.3, sanitization and disposal
6
Thursday, August 20
System and Communications Protection
Online • 1 hour • SC.L1-3.13.1 and SC.L1-3.13.5
7
Thursday, August 27
System and Information Integrity
Online • 1 hour • SI.L1-3.14.1 / 3.14.2 / 3.14.4 / 3.14.5
8
Thursday, September 3
Evidence Assembly and Live SPRS Affirmation
Online • 1 hour • Full evidence audit, plus live SPRS compliance result entry and affirmation
Submit

A CCA at Every Session

CCA

Certified Assessor

Every session is led by a CMMC Certified Assessor, the same credential required to conduct official Level 2 assessments.

15

Practices Covered

All 15 CMMC Level 1 practices from FAR 52.204-21, assessed across 17 objectives and each marked Met or Not Met.

Cohort

Shared Pace, Lower Cost

A guided cohort model gives small DIB companies a structured, lower-cost path to the same Level 1 self-assessment outcome.

Register for the Clinic

Seats are limited. Both programs fill on a first-come, first-served basis.

Clicking the button opens your email app with your details ready to send to biz@ComplianceCavalry.com. No payment is collected here; our team will contact you within one business day to confirm enrollment. If the button does not open your email app, email biz@ComplianceCavalry.com directly.

Frequently Asked Questions

What is CMMC Level 1 and does it apply to my company?

CMMC Level 1 applies to any company that handles Federal Contract Information (FCI) under a DoD contract: products, services, or R&D. It requires implementing all 15 Level 1 practices (17 assessment objectives) and submitting an annual self-assessment along with a formal affirmation of compliance to SPRS. If your contract references FAR 52.204-21 or DFARS 252.204-7012, Level 1 applies to you.

What is the difference between the 4-week and 8-week programs?

Both programs cover the same 15 practices and produce the same SPRS affirmation outcome. The 4-week program ($1,500, Tuesdays starting July 21) is faster-paced and requires companies to arrive with IT documentation already organized. The 8-week program ($2,500, Thursdays starting July 16) gives more time between sessions to gather evidence and is better suited for companies new to CMMC.

What is the Cavalry GRC Tool?

The Cavalry GRC Tool is our governance, risk, and compliance platform built for CMMC self-assessments. It walks you through all 15 Level 1 practices, lets you attach evidence, tracks your compliance status in real time, and generates the documentation package you need for your SPRS submission. Access is included in both programs.

What is SPRS and what does submitting at Level 1 mean legally?

SPRS (Supplier Performance Risk System) is the DoD portal where contractors submit their CMMC compliance results and a formal affirmation of compliance. For Level 1 there is no numerical score like Level 2; you submit a binary compliance result (all 15 practices Met) and an affirmation signed by your company's Affirming Official. This is a legal attestation under 32 CFR §170.15. A false affirmation is a potential False Claims Act (FCA) violation. This clinic walks you through building authentic evidence and submitting an accurate, defensible affirmation with a CCA present.

Where are the in-person kickoff sessions held?

Kickoff session location details are provided upon registration confirmation. The in-person sessions are held in the Kitsap-Puget Sound area. All subsequent sessions are conducted online via video conference.

What happens if my company has gaps and cannot fully pass all the practices?

Unlike CMMC Level 2, Level 1 does not permit a Plan of Action and Milestones (POA&M). Per 32 CFR §170.15, all 15 practices must be fully implemented before your Affirming Official can submit. If you have gaps, you must remediate them before submitting, not document them for later. The clinic identifies your gaps early so you have time to close them before the final session.

Can more than one person from my company attend?

Yes. The registration price is per company, not per seat. We recommend bringing your operations lead and IT point of contact to the kickoff session. Online sessions can accommodate multiple attendees from the same company under one registration.

What if I need to miss a session?

Sessions are recorded for registered companies. Missing one session is manageable with advance notice. Missing two or more significantly impacts your ability to complete the assessment by the program end date. Contact us before registering if your schedule has known conflicts during the program dates.