How do I know which CMMC level I need?

The level follows the information you handle. Federal Contract Information only points to Level 1. Controlled Unclassified Information points to Level 2. The most sensitive programs point to Level 3. Your contract's clauses make the final call.

Is this tool legal or compliance advice?

No. It points to the level that matches the information you describe. Confirm the level with your prime contractor or contracting officer.

Tool

Which CMMC level matches the information you handle?

Three questions, one answer. It points to a level. Your contract's clauses make the final call.

Question 1

Do you work under a Department of Defense contract or subcontract?

A prime contract, or a subcontract from a prime.

Answer the questions above

Your result appears here.

Sources: FAR 52.204-21 (Federal Contract Information), National Archives: About CUI, DoD CIO: About CMMC.

Last reviewed: October 10, 2026

Know your level? Know your gaps.

A gap assessment shows where you stand before an assessor does. Apply for the in-kind grant or book one directly.

Apply for the CMMC grant Book a CMMC gap assessment

Or email info@cybersecuritynearme.ai