SECURITY & COMPLIANCE OPERATIONS // FEDRAMP · CMMC · NIST · ISO 27001
vCISOx/Templates/CMMC Level 1 Pack
CMMC LEVEL 1 · SELF-ATTESTATION · FOR SMALL DEFENSE CONTRACTORS

Passing-grade Level 1 documentation —
from the consultants who build them for a living.

A productized version of the work we deliver on consulting engagements — at a fraction of the price. Six documents written the way auditors want to see them, with passing-grade policy language, evidence guidance, and the pre-submit review that catches the four mistakes that get SPRS submissions rejected. Built by practitioners who charge $375/hour for the custom version of this.

LEVEL 1 PACK · COMING SOON
$999 one-time
Or $1,999 with AI pre-submit review + 30-min expert call
// WHAT'S INSIDE

Six documents.
Passing-grade language in every one.

01

System Security Plan (SSP) template

Short, Level 1–scoped. Environment, boundary, system inventory. Five to ten pages. Editable in Word or Google Docs.

02

Seventeen practice-level policy documents

One page per practice. Each includes policy, procedure, and evidence guidance with passing-grade example language you edit for your environment. Covers AC, IA, MP, PE, SC, SI families.

03

Evidence index workbook

Spreadsheet mapping every practice to the evidence sources that support it. Where it lives, who owns it, and how to produce it in one business day.

04

SPRS scoring worksheet

Self-assessment math you can defend. Plus guidance on what to enter into PIEE and when your prime will see it.

05

Pre-submit review checklist

Catches the four mistakes that get submissions rejected: vague language, copy-paste leftover references, aspirational policies, and missing evidence.

06

Level 1 boundary diagram template

A simple Visio/Lucid-ready diagram showing what's in scope. Many primes require this. Included — not an add-on.

// THE FOUR REJECTION MISTAKES

What this pack
prevents.

01

Vague language masquerading as policy

“Industry best practices,” “appropriate controls,” “as needed.” Reviewer red flags. Our templates replace these with specific roles, frequencies, and systems the reviewer can verify.

02

Copy-paste policies that don't match your environment

Generic packs reference systems you don't use and roles you don't have. Our templates are scoped to small contractors (5–200 people) and tell you exactly what to edit.

03

Aspirational documentation

Policies describing what you will do instead of what you currently do get flagged. Our pre-submit checklist catches this in five minutes.

04

No evidence referenced

Beautiful policies with zero artifacts. The evidence index workbook forces you to name the evidence for every practice before you submit.

// WHO THIS IS FOR

Built for a specific buyer.
Not everyone.

◢ THIS IS FOR YOU IF
  • You're a small defense contractor (5–200 people) handling only FCI
  • Your prime or your contracting officer is asking for Level 1 self-attestation
  • You want the quality of a consulting engagement without the six-figure timeline
  • You'd rather submit once, correctly, than go through an SPRS rejection cycle
  • You trust documentation more when it comes from practitioners who do this for a living
◢ THIS IS NOT FOR YOU IF
  • You handle CUI — you need Level 2, which is a different product
  • You don't actually have federal contracts — CMMC doesn't apply
  • You want someone else to do the work for you — consider our Guided Compliance engagement instead
  • You want to bundle this with proof-of-insurance, SAM.gov registration, or other compliance artifacts — not included
◢ BE FIRST IN LINE

Get notified when it ships

We're shipping the Level 1 Template Pack in the coming weeks. Put your email in and we'll send one message when it's live — with a launch-day discount for early subscribers.

One email when the pack ships. No drip sequences, no retargeting, no data sold.
// QUESTIONS

The things
people ask.

When is this actually available?

We're finalizing the template content now. Early subscribers get a single launch notification when it ships. No marketing emails in the meantime.

What's the price?

The Level 1 Pack is $999 at launch — one-time, no subscription. A Pro tier at $1,999 adds an AI-assisted pre-submit review that catches the four rejection mistakes in your actual documents, plus a 30-minute expert consultation call before you submit to SPRS.

Why not cheaper?

Because this is a productized version of work we do on $7,500 consulting engagements. You're not buying generic templates — you're buying our actual deliverables, refactored so you can adapt them to your environment. If you'd rather pay less for generic templates from a marketplace, those exist. Our buyers pay for the confidence that the work product came from people who do this for a living.

Is this enough to pass on my own?

For most small contractors handling only FCI, yes. The templates give you the structure and language — you still have to edit them to match your actual environment. The Pro tier's AI review plus expert call exists specifically to eliminate any remaining doubt before you attest.

What if I actually need Level 2?

Then this pack isn't for you. Level 2 requires a full NIST 800-171 implementation and a C3PAO assessment — different product. Start with our free scoping tool to confirm which level you need.

Can I resell this to my clients?

Not under a standard license. If you're a consultant, MSP, or prime wanting to distribute this to multiple companies, contact us for a partner license.