Does CMMC Level 1 require encryption for FCI?
Last updated: 6/5/2025
CMMC Level 1 does not have a specific, standalone practice mandating encryption for FCI at rest or in transit. However, encryption can be a method to meet other requirements, such as protecting FCI on disposed media (MP.L1-b.1.vii) or during transmission under certain boundary protection (SC.L1-b.1.x) scenarios.