Is a System Security Plan (SSP) required for CMMC Level 1?
Last updated: 6/5/2025
While the CMMC Level 1 Assessment Guide (Version 2.13) notes that an SSP is recommended as a best practice, it explicitly states it is not required to obtain a Level 1 self-assessment. However, documenting your practices is highly beneficial.