Is a System Security Plan (SSP) required for CMMC Level 1?

Last updated: 6/5/2025

While the CMMC Level 1 Assessment Guide (Version 2.13) notes that an SSP is recommended as a best practice, it explicitly states it is not required to obtain a Level 1 self-assessment. However, documenting your practices is highly beneficial.

Ready to Simplify CMMC Level 1?

CMMC Resources provides the expert guidance and intuitive tools you need to navigate compliance with confidence. Stop guessing, complete CMMC Level 1 with confidence.