Foundational cyber-hygiene. On your premises.
If your contracts touch Federal Contract Information (FCI), CMMC Level 1 is the floor. Reach Networks gets you there with the 17 practices of FAR 52.204-21 documented, implemented, and ready for your annual self-assessment.
What CMMC Level 1 actually requires
Level 1 covers 17 basic safeguarding practices drawn directly from FAR clause 52.204-21. It applies to any contractor or subcontractor that processes, stores, or transmits Federal Contract Information — information provided by or generated for the government under a contract that isn't intended for public release.
Unlike higher levels, Level 1 is satisfied through an annual self-assessment and an affirmation in the Supplier Performance Risk System (SPRS). There's no third-party assessor — but the obligation to actually implement the controls, and to be able to prove it, is real. That's where most small contractors stumble.
What Reach Networks delivers
A complete, audit-defensible Level 1 posture — not a checklist you're left to interpret alone.
- All 17 practices implemented across access control, identification & authentication, media protection, physical protection, system & communications protection, and system & information integrity.
- Policy set & documentation written to map cleanly to each FAR 52.204-21 requirement.
- Asset inventory identifying every system that touches FCI.
- Evidence binder ready for your annual self-assessment and SPRS affirmation.
- Managed endpoint & email security to keep the controls operational year-round.
Where Level 1 fits
Handle FCI only
If you don't touch Controlled Unclassified Information (CUI), Level 1 is typically your requirement.
Ready to grow
Everything we implement at Level 1 is a clean foundation for a future move to Level 2.
Self-assessment ready
We hand you the evidence and the affirmation pathway, so renewal each year is routine.
See exactly what you'd inherit.
A short conversation tells us whether Level 1 or Level 2 is your real target — and what it takes to get there.
Request an assessment