How does CMMC Level 1 compare to NIST SP 800-171?
Last updated: 6/5/2025
CMMC Level 1 is based on the 15 requirements from FAR 52.204-21, which are a subset of the broader controls found in NIST SP 800-171. NIST SP 800-171 is more comprehensive and forms the basis for CMMC Level 2, which protects CUI.