How does CMMC Level 1 apply if I use cloud services to store FCI?

Last updated: 6/5/2025

If you use cloud services (e.g., Microsoft 365, Google Workspace) to store or process FCI, those cloud environments fall within your CMMC Level 1 assessment scope. You are responsible for ensuring the cloud service and your use of it meet the applicable Level 1 requirements.

Ready to Simplify CMMC Level 1?

CMMC Resources provides the expert guidance and intuitive tools you need to navigate compliance with confidence. Stop guessing, complete CMMC Level 1 with confidence.