These public official references informed the guide. Sources were opened or reviewed through current official search results on October 25, 2026. The eCFR text displayed Title 32 as current through October 22, 2026. Follow each link for its latest text and status.
- FAR 52.204-21 — Basic Safeguarding of Covered Contractor Information Systems
- 32 CFR 170.15 — Level 1 self-assessment and affirmation requirements
- 32 CFR 170.19 — CMMC scoping
- 32 CFR 170.22 — Affirmation
- National Archives — About Controlled Unclassified Information
- SPRS — CMMC training and reference materials
- SPRS — User access
- SPRS — Frequently asked questions
How to use this library
Start with the contract and the FAR clause for the actual obligation. Use 32 CFR 170.15 for the Level 1 self-assessment, 170.19 for scope, and 170.22 for affirmation. SPRS provides current portal training and access information. National Archives guidance helps explain the separate CUI concept.
Official supplemental guides
The official CMMC documentation library is the source for supplemental assessment and scoping guides. Direct access to that library and PDF documents was restricted during this editorial session. We therefore used the accessible regulation and official SPRS references for the linked explanations and do not claim to have inspected the current PDF edition.
Rule text, guidance, and your contract
A practical article is a secondary explanation. It should not be used to override source text, a contract clause, an agency instruction, or a current official interpretation. The eCFR is a continuously updated online edition; its own site explains its legal status. If a conflict affects a business decision, consult the responsible contracting or security personnel.
Commercial pages checked for contextual links
Federal Bid Partners' Level 1 readiness service page, its contact page, and CMMC Pulsar's product page were checked on October 25, 2026 to support accurate descriptions of those offerings. They are commercial sources, not authority for the regulatory requirements.