Fifteen requirements, one annual self-assessment, and an affirmation a senior official signs.
80+ assessments completed and 400+ organizations supported
The team that wrote your Level 1 document set spends the rest of its time assessing Level 2 programs.
You are not paying for a Level 2 program you do not need. The engagement is short on purpose.
If a future contract pushes you to Level 2, nothing you build here gets thrown away. The document set extends.
A short, scoped engagement for organizations that want an assessor’s eyes on it before anyone signs an affirmation.
“In our own compliance journey of trying to figure out what we are required to do, even with consultants that helped us along the way, the MOST useful resource that we have found to date has been the KCD.”
Melissa Kimball
, Director
University of Maine
“My team and I have been using the KCD for about a week now, and I have to say, it’s been a breath of fresh air compared to our previous approach. It has made several processes much easier for us, and for that, we’re truly grateful. You have a fantastic product that far exceeds our expectations.”
Daniel Martinez
, Director of Cybersecurity
nDepth Security
“In our own compliance journey of trying to figure out what we are required to do, even with consultants that helped us along the way, the MOST useful resource that we have found to date has been the KCD.”
Melissa Kimball
, Director
University of Maine
“My team and I have been using the KCD for about a week now, and I have to say, it’s been a breath of fresh air compared to our previous approach. It has made several processes much easier for us, and for that, we’re truly grateful. You have a fantastic product that far exceeds our expectations.”
Daniel Martinez
, Director of Cybersecurity
nDepth Security
Level 1 engagements are small by design. Start with the document set, add hours only where you want an assessor’s eyes on the work.
Federal Contract Information is information provided by or generated for the government under a contract that is not intended for public release. Controlled Unclassified Information is a narrower, more sensitive category with its own marking rules. FCI puts you at Level 1. CUI puts you at Level 2.
No. Level 1 is a self-assessment you perform every year and submit yourself. No third-party assessment organization is involved.
No. All 15 requirements have to be met before you are eligible for award. Level 1 has no partial credit, which is why the review before you sign matters.
A senior official from your company affirms the Level 1 status in SPRS, and it repeats annually. Treat it as a real signature, because it is.
No. The suspension affected the Level 2 certification milestone. Level 1 self-assessments and annual affirmations still apply.
Nothing you built at Level 1 is wasted. The document set extends into the full Kieri Compliance Documentation, and the scoping work carries over.
No. The team advising you is not the team that would certify you later. We explain the boundary before you engage.





Get the document set, get an assessor to check your answers, and affirm with confidence. Over 400 organizations supported to date.
CMSS consulting
Know where you stand
NIST SP 800-171
Official CMMC certification
CMMC 2.0
Official CMMC certification
Our Ethical Standards
Know where you stand
Free Gap Assessment
Your compliance status