How does CMMC Level 1 compare to NIST SP 800-171?
Last updated: 7/24/2025
CMMC Level 1 is based on the 15 requirements from FAR 52.204-21, which are a subset of the broader controls found in NIST SP 800-171. NIST SP 800-171 is more comprehensive and forms the basis for CMMC Level 2, which protects CUI.