CMMC 2.0 Compliance Survival Guide: For Small Defense Contractors

CMMC Level 1 is still required. You can do it yourself, and this book shows you how. The Phase 2 third-party mandate is on hold while the Department reviews the program. Level 1 self-assessment, your SPRS score, and DFARS 252.204-7012 are not. If you bid on DoD work, those are live obligations today, and the pause is the best window you will get to finish them without a deadline on your neck. This guide walks a small contractor through Level 1 from first checklist to signed affirmation, in plain English, with no consultant required. Inside: - Every Level 1 practice explained, each with an actionable checklist - How to run your self-assessment and submit your score to SPRS - System Security Plan templates you can customize - A realistic 3-6 month roadmap and a budget that fits a small shop - Getting your team on board without resistance - Annual affirmation: what you sign and what it means >Who it is for: Machine shops, parts suppliers, manufacturers, MSPs, and any subcontractor that handles Federal Contract Information. Written for owners and managers, not security engineers. Based on 32 CFR Part 170, NIST SP 800-171, and FAR 52.204-21. Updated for the July 2026 program review. Level 1 is the floor. Get it done.