How does CMMC Level 1 apply if I use cloud services to store FCI?
Last updated: 6/5/2025
If you use cloud services (e.g., Microsoft 365, Google Workspace) to store or process FCI, those cloud environments fall within your CMMC Level 1 assessment scope. You are responsible for ensuring the cloud service and your use of it meet the applicable Level 1 requirements.