ABCDEFGHIJKLMNOPQRSTUVWXYZ
1
CMMC Level 1 Gap Analysis Template (with Examples & Reference IDs)
2
3
Purpose: Identify and document gaps for CMMC Level 1 (FAR 52.204‑21 requirements).
4
Who: Small or midsize DoD contractors handling only Federal Contract Information (FCI).
5
6
How to Use:
7
1. Open the 'Blank' tab and mark each requirement as In Place (Y) or Not (N).
8
2. Add evidence references (policy name, screenshot, etc.).
9
3. Use 'Assessment Method' to note Examine / Interview / Test.
10
4. See 'Example_A' and 'Example_B' tabs for realistic scenarios.
11
5. Use 'Checklist' tab as a one-page summary.
12
13
Understanding Assessment Methods:
14
Examine — Review written policies, configurations, or settings.
15
Interview — Ask staff how a process works.
16
Test — Observe or verify a process in operation.
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100