CMMC Level 1 · New Mexico small contractors
If a prime or a federal customer is asking you about cybersecurity or CMMC, start here. Miclyn helps New Mexico small contractors find out what actually applies, secure what needs protecting, and prepare for CMMC Level 1 — without turning your business into an IT project.
Read this first
A lot of small contractors get a cybersecurity questionnaire from a prime and assume the worst. Sometimes CMMC applies. Sometimes it doesn’t. And sometimes what looks like Level 1 is actually the bigger Level 2 requirement. We help you figure out which — before anyone spends money on compliance.
CMMC Level 1 may be required when your federal or defense contract calls for Level 1 and your systems process, store, or transmit Federal Contract Information (FCI). Government-adjacent work by itself doesn’t automatically mean you have a current CMMC requirement. Not sure whether it applies to you? We check first — for free.
Directly, or as a sub to a prime — even single jobs or work orders at a base.
Work orders, project instructions, non-public files tied to the contract.
A clause, a questionnaire, or a prime saying “you’ll need to be compliant.”
If those sound familiar, the free check is worth 5 minutes. If they don’t, you’ll likely find out you have nothing to do here — which is worth knowing too.
Plain English
CMMC is the government’s way of confirming that contractors protect certain non-public information tied to federal work. Level 1 is the entry level. It’s built on 15 basic safeguards — most of which have been in federal contracts since 2016 — plus a yearly self-check and a sign-off.
Common-sense protections, not exotic security.
Level 1 is a yearly self-assessment — a third-party (C3PAO) assessment is not required.
You keep it current and confirm it each year in the government’s system (SPRS).
The distinction that changes everything
Non-public information tied to a federal job:
A tighter category that points to a bigger requirement:
If we see a sign of CUI, we pause the Level 1 path and look at it properly. We’d never push a business into the wrong requirement because it’s the easier sale. A drawing or blueprint isn’t automatically CUI — it depends on the markings and the contract.
What Level 1 asks you to do
Only the right people get into your systems and information.
Everyone uses their own account — no shared logins. Miclyn adds stronger sign-in like MFA as part of our security standard.
Business information stays separated and protected.
Systems stay current and protected from malware.
Equipment, printouts, and old devices handled safely.
Sensible protection for the information that matters.
Built for small
You don’t need a commercial office or an IT department. A home office doesn’t rule out Level 1 — we just help keep the business side separate from the family and smart-home side.
How Miclyn helps
What you probably don’t need
For an FCI-only Level 1 business, these are usually unnecessary — and we’ll say so:
How it works
Find out if it applies.
What’s missing + a plan.
We implement the safeguards.
You record it in SPRS.
Kept current, reviewed yearly.
Pricing, honestly
We don’t bundle everything into one scary number, and we don’t sell fear. Qualification is free. If Level 1 applies, there are two simple CMMC numbers — a one-time Foundation and a flat yearly renewal — with your SecureIT security billed separately.
This is our standard price for a typical small, FCI-only business. Unusual setups — multiple sites, on-premise servers, or special software — are quoted separately after we look. Any hardware, licensing, or out-of-scope remediation is discussed and approved separately before work begins.
Why Miclyn
Albuquerque-based. We know New Mexico’s federal and defense ecosystem.
We fix only what the work requires, and tell you what you don’t need.
A consultant says “segment your network.” We design, install, and manage it.
Ongoing management and next year’s self-assessment — not a one-time binder.
Miclyn is a managed technology and cybersecurity partner based in Albuquerque, New Mexico, serving small businesses that do federal and defense work.
Questions people actually ask
Free · No obligation
Answer a few plain-English questions and a local Miclyn specialist will review your result with you. You’ll get a one-page CMMC Qualification Snapshot to keep — whatever you decide.