{"asOf":"2026-09-05","merchant":"SSDF INC","kind":"event","id":"phase-1","date":"2025-11-10","title":"CMMC Phase 1 begins","kicker":"Self-assessment at award","status":"in_force","body":"Contracting officers may include Level 1 (Self) or Level 2 (Self) as a condition of award. Annual affirmation of continuous compliance in SPRS. DFARS 252.204-7012 cyber-incident reporting stays in force independently of CMMC phase.","clerk":"DFARS 252.204-7021","cites":["32 CFR 170.3(e)","DFARS 252.204-7012"],"notes":["Self-assessment for Level 2 uses the CMMC Level 2 Self tab in SPRS, not the legacy 800-171 tab."]}