Your Guided Path to CMMC Level 1 Compliance
An 8-week online clinic covering all 15 CMMC Level 1 practices and their 59 assessment objectives. No prior CMMC knowledge or deep IT expertise required. Start with a compliance gap; finish with your SPRS compliance result and affirmation submitted.
Your instructor is a CCA. Here is why that matters.
A CCA (CMMC Certified Assessor) is the credential the DoD ecosystem requires for conducting official third-party CMMC assessments. CCAs are the assessors that C3PAOs (the authorized third-party audit organizations) task with running real audits of defense contractors. Every session of this clinic is led by a CCA, so the person guiding your self-assessment has been trained, tested, and certified at the level that conducts the real thing. Compliance Cavalry is not a C3PAO and does not perform third-party assessments; you simply get an instructor who knows exactly what an assessor looks for.
Why This Matters
FCI Comes With a Requirement Attached
Federal Contract Information is any information provided by or generated for the Government under contract that is not intended for public release. In practice it is often mundane: statements of work, delivery schedules, drawings, part specifications, and correspondence about the contract. If your company touches any of it, CMMC Level 1 applies to you.
What your company gains
A completed, defensible Level 1 self-assessment with your SPRS affirmation on file, the compliance record primes and contracting officers increasingly check before awarding work. You also walk away with organized documentation, an audit-ready evidence package, and a repeatable process for the annual renewal, instead of a scramble every year.
The risk of skipping it, or getting it wrong
Handling FCI without a current Level 1 self-assessment puts contract eligibility at risk, and primes are already asking subcontractors for proof. An inaccurate affirmation is worse than none: it is a signed legal attestation, and a false one is a potential False Claims Act violation for your company and the official who signed it.
Level 1 is pass/fail
There is no partial credit and no POA&M at Level 1. All 15 practices, across all 59 assessment objectives, must be fully implemented before your Affirming Official can submit. One unfinished item means you are not compliant yet. The clinic finds your gaps early so you have weeks, not days, to close them.
The Program
One Cohort. One Outcome.
All 15 practices, expert guidance at every session, and your SPRS compliance result and affirmation submitted live in the final session. You do not need to be an IT expert or a CMMC veteran; if you have access to your company’s systems and know how the business runs, we guide you through the rest.
- Online kickoff session (2 hours, October 15, 10:00 AM to 12:00 PM (PST))
- 7 online sessions of 1 hour each (Thursdays, 10:00 to 11:00 AM (PST))
- Sessions recorded for registered companies
- All 15 Level 1 practices assessed (59 assessment objectives)
- Cavalry GRC Tool access included
- Documentation templates included
- Live SPRS compliance result entry and affirmation in the final session (Dec 10)
- Completes December 10 with your Level 1 self-assessment and SPRS affirmation on file
What’s Included
What Every Company Gets
Every company in the cohort receives the same toolkit and the same expert guidance, session by session.
Instructor-Led Sessions
Every session is live and instructor-led, with open Q&A on your own environment, and every session is recorded for registered companies.
Cavalry GRC Tool
Full access to the Cavalry GRC Tool to track all 15 practices, attach evidence, and build the documentation package your Affirming Official needs to submit your SPRS affirmation.
Documentation Templates
Policy templates, visitor logs, media disposal records, and affirmation letters, everything you need to build an evidence package from scratch.
All 15 Practices Covered
The 15 CMMC Level 1 practices from FAR 52.204-21, assessed across 59 assessment objectives and marked Met or Not Met.
Live SPRS Affirmation
The final session walks you through entering your compliance result and submitting the formal SPRS affirmation with your instructor present in real time.
Affirmation Letter Template
A pre-built affirmation template your senior official can review and sign, so they understand exactly what they are attesting to in SPRS.
Session by Session
Clinic Schedule
8-Week Comprehensive, Thursdays • Fully Online
October 15 to December 10, 2026 • No session November 26 (Thanksgiving) • Sessions recorded for registered companies
Why Compliance Cavalry
A CCA at Every Session
Certified Assessor
Every session is led by a CMMC Certified Assessor, the credential C3PAOs task with conducting official third-party assessments. Your instructor is trained and tested at the level that runs the real audits.
Practices Covered
All 15 CMMC Level 1 practices from FAR 52.204-21, assessed across 59 assessment objectives and each marked Met or Not Met.
Shared Pace, Lower Cost
A guided cohort model gives small DIB companies a structured, lower-cost path to the same Level 1 self-assessment outcome.
Reserve Your Seat
Register for the Clinic
Seats are limited and fill on a first-come, first-served basis.
No payment is collected here; our team will contact you within one business day to confirm enrollment. If the form gives you any trouble, email biz@ComplianceCavalry.com directly.
Questions
Frequently Asked Questions
What is CMMC Level 1 and does it apply to my company?
CMMC Level 1 applies to any company that handles Federal Contract Information (FCI) under a DoD contract: products, services, or R&D. It requires implementing all 15 Level 1 practices (59 assessment objectives) and submitting an annual self-assessment along with a formal affirmation of compliance to SPRS. If your contract references FAR 52.204-21 or DFARS 252.204-7012, Level 1 applies to you.
Who is the 8-week clinic designed for?
The clinic is built for companies new to CMMC or NIST SP 800-171 that want guided support. You do not need to be an IT expert or have any prior CMMC knowledge. The right attendee is simply someone who has access to your company’s systems and knows how the business operates; we provide the guidance on what evidence to gather and how to bring your company to Level 1 compliance. The clinic runs online Thursdays starting October 15, and the weekly cadence leaves time between sessions to gather evidence and work through the done-for-you templates at a manageable 1 to 2 hours of homework per week.
What is a CCA and why does it matter that one leads the clinic?
A CCA (CMMC Certified Assessor) is the credential required to conduct official third-party CMMC assessments for C3PAOs, the organizations the DoD authorizes to audit defense contractors. In other words, CCAs are the people trained, tested, and certified to run the real audits. Every session of this clinic is led by a CCA, so your self-assessment is guided by someone who knows exactly what an assessor looks for and what evidence actually holds up. Compliance Cavalry is not a C3PAO and does not perform third-party assessments.
What is the Cavalry GRC Tool?
The Cavalry GRC Tool is our governance, risk, and compliance platform built for CMMC self-assessments. It walks you through all 15 Level 1 practices, lets you attach evidence, tracks your compliance status in real time, and generates the documentation package you need for your SPRS submission. Access is included in the clinic.
What is SPRS and what does submitting at Level 1 mean legally?
SPRS (Supplier Performance Risk System) is the DoD portal where contractors submit their CMMC compliance results and a formal affirmation of compliance. For Level 1 there is no numerical score like Level 2; you submit a binary compliance result (all 15 practices Met) and an affirmation signed by your company’s Affirming Official. This is a legal attestation under 32 CFR §170.15. A false affirmation is a potential False Claims Act (FCA) violation. This clinic walks you through building authentic evidence and submitting an accurate, defensible affirmation.
Does the CMMC Phase 2 suspension change my Level 1 requirement?
No. In July 2026 the Department suspended the CMMC Phase 2 milestone, which would have required Level 2 third-party (C3PAO) assessments for companies handling Controlled Unclassified Information. Phase 1 was not suspended. If your company handles Federal Contract Information under a DoD contract, the annual Level 1 self-assessment and SPRS affirmation requirement that took effect November 10, 2025 is still in force. Level 1 is unchanged by the pause.
Are the sessions in person or online?
The October clinic is fully online. All eight sessions, including the two-hour kickoff on October 15 (10:00 AM to 12:00 PM PST), are held via Microsoft Teams. A calendar invitation covering the kickoff and the full eight-week series arrives about a week before the clinic begins.
What happens if my company has gaps and cannot fully pass all the practices?
Level 1 is pass/fail. Unlike CMMC Level 2, Level 1 does not permit a Plan of Action and Milestones (POA&M). Per 32 CFR §170.15, all 15 practices must be fully implemented before your Affirming Official can submit. If you have gaps, you must remediate them before submitting, not document them for later. The clinic identifies your gaps early so you have time to close them before the final session.
Can more than one person from my company attend?
Yes. The registration price is per company, not per seat. We recommend having your operations lead and IT point of contact join the kickoff session. Every session can accommodate multiple attendees from the same company under one registration.
What if I need to miss a session?
Sessions are recorded for registered companies, so if you need to miss a session you will still have all the information that was covered; you will just miss your opportunity to ask questions live in that session. And because registration is per company rather than per seat, other members of your company can attend in your place.
) inside #ccl-reg; no custom submit handling is needed here. */ })();