How does CMMC Level 1 address mobile devices (phones, tablets)?
Last updated: 6/5/2025
If mobile devices are used to access, store, or transmit FCI, they are in scope for CMMC Level 1. Practices like authorized access control (AC.L1-b.1.i), authentication (IA.L1-b.1.vi), and malicious code protection (SI.L1-b.1.xiii) would apply to them.