What is shared responsibility when using cloud services for CMMC Level 1?

Last updated: 6/5/2025

When using a cloud service provider (CSP) for FCI, there's a shared responsibility. The CSP is responsible for securing their infrastructure, but your organization is responsible for configuring the service securely and how your employees use it to protect FCI, in line with CMMC Level 1 practices.

Ready to Simplify CMMC Level 1?

CMMC Resources provides the expert guidance and intuitive tools you need to navigate compliance with confidence. Stop guessing, complete CMMC Level 1 with confidence.