Get Support
Skip to main content
Get Support
Free IT Checkup
Ongoing CMMC Level 1 consulting and implementation from ShowTech Solutions

CMMC Level 1 Compliance,
Made Provable

You can’t be compliant if you can’t prove it.

To win and keep Department of Defense contracts, you need to meet CMMC Level 1. You also need to show your work every year. ShowTech Solutions sets up the controls, runs them with you, and keeps the evidence audit-ready in one GRC platform, so compliance becomes part of how you operate instead of a scramble once a year.

Schedule a CMMC Readiness Review

What CMMC Level 1 Requires

The Cybersecurity Maturity Model Certification (CMMC) program sets the cybersecurity standard for companies in the defense supply chain. Level 1 (“Foundational”) applies to any contractor or subcontractor that handles Federal Contract Information (FCI). That’s information about a government contract that isn’t meant for public release.

Level 1 includes:

15 basic safeguarding requirements

from FAR 52.204-21, covering access control, identification and authentication, media protection, physical protection, system and communications protection, and system and information integrity.

An annual self-assessment

of how well you meet each requirement.

An annual affirmation

by a senior company official, submitted in the Supplier Performance Risk System (SPRS).

The requirements are basic, but the affirmation is serious. A senior leader signs their name to say your company meets them. If you can’t back that up with current documentation and evidence, you’re taking on risk you don’t need.

Why a GRC Platform Is Non-Negotiable

Many small contractors try to manage CMMC with spreadsheets, shared folders and a policy binder. That works until someone asks for proof.

Compliance that isn’t documented, tracked and auditable is only a guess.

Each ShowTech CMMC engagement runs on our Governance, Risk, and Compliance (GRC) Platform. It gives you one source of truth for:

  • Which controls apply to you and how each one is met
  • Current, automatically collected evidence that the controls are working
  • Gaps, who owns fixing them and the due dates
  • The documentation behind your annual self-assessment and affirmation

When an assessor, prime contractor or insurance carrier asks questions, you can answer with a report instead of a fire drill.

How ShowTech Delivers CMMC Level 1

  1. 1

    Scope and Assess

    We find where FCI lives in your business: which people, systems, devices and locations touch it. Then we assess your current environment against all 15 Level 1 requirements, so you know where you stand.

  2. 2

    Implement

    We close the gaps. This isn’t a report you’re left to figure out on your own. Our team configures and hardens your systems directly, including user access, multi-factor authentication, endpoint protection, patching, secure configurations, boundary protection and physical safeguards. As your managed IT provider, we can make the fixes as well as recommend them.

  3. 3

    Document

    We build and maintain your compliance documentation in the GRC Platform: policies, procedures, control narratives and supporting evidence. It all stays organized, current and ready to share.

  4. 4

    Monitor and Maintain

    Compliance isn’t a one-time project. Staff change, systems get updated and new devices get added. We monitor your environment continuously, flag changes that affect compliance and keep your evidence current throughout the year.

  5. 5

    Affirm With Confidence

    When it’s time for your annual self-assessment, we walk your leadership through the results and supporting evidence. Your senior official can sign the affirmation knowing it’s backed by real documentation.

What’s Inside the ShowTech GRC Platform

Compliance Management

Track every CMMC control, its status and remediation work from one centralized dashboard.

Automated Evidence Collection

Gather and validate evidence automatically from your connected security, networking and communication systems. No more screenshots and scattered folders.

Continuous Monitoring

Get real-time visibility into your security posture and know right away when a change could affect compliance.

Audit-Ready Reporting

Produce compliance reports, executive summaries, System Security Plans and evidence packages when you need them, for assessors, prime contractors, customers and insurers.

Cyber Insurance Support

Simplify cyber insurance applications and renewals with automated questionnaire responses and a clear record of your controls.

Built to Grow With You

The platform supports CMMC, NIST, CIS Controls and more than 60 cross-mapped frameworks. If your contracts later require CMMC Level 2 or you add other compliance requirements, the work you’ve already done carries forward.

Why Contractors Choose ShowTech Solutions

The ShowTech Solutions team
  • One partner for IT, security and compliance. Your IT provider and your compliance consultant are the same team, so nothing gets lost between them.
  • Locally owned, with a real human response. When you call, a person answers, usually in under four minutes.
  • Security-first by design. Our 24/7 security monitoring supports your compliance posture every day, not only at assessment time.
  • Flat-rate pricing, no surprises. You’ll know what ongoing compliance costs before we start.
  • Plain-spoken guidance. We explain what CMMC means for your business without the jargon.

Frequently Asked Questions

Does CMMC Level 1 require a third-party assessment?

No. Level 1 uses an annual self-assessment and an affirmation by a senior company official. That’s why solid documentation matters: your company is vouching for its own compliance.

How do I know if I need Level 1 or Level 2?

It depends on the information you handle. Level 1 covers Federal Contract Information (FCI). If you handle Controlled Unclassified Information (CUI), you’ll likely need Level 2. Your contract requirements decide which level applies, and we can help you review them.

We already have an IT provider. Can ShowTech still help?

Yes. We offer co-managed engagements where we work alongside your existing IT team to handle compliance, documentation and the GRC Platform.

What happens after the first year?

We keep going. Ongoing consulting includes continuous monitoring, evidence upkeep, periodic reviews and support for each annual self-assessment and affirmation.

Compliance you can prove. Every year.

Don’t let a gap in your paperwork put your government contracts at risk. Let’s talk about where you stand today and what it will take to get compliant and stay that way.

Schedule Your CMMC Readiness Review

ShowTech Solutions: When IT Problems Disappear, Productivity Thrives

When IT Problems Disappear, Productivity Thrives

Locally owned managed IT, cybersecurity and AI development for Tampa Bay businesses for over 16 years.

Linkedin-in Facebook-f Instagram Youtube
GTIA Cybersecurity Trustmark AssuredOfficial IT partner of Tampa Bay Sun FC
  • Main OfficeTampa, FL
    200 N. Pierce Street #100
    Tampa, Florida 33602
    (813) 793-4700

Services

Industries

Resources

About

© 2026 ShowTech Solutions. All rights reserved.

Privacy Policy

Dax Lassiter
Service Manager

Dax focuses on ensuring every client feels valued and supported. With a background in client relations, leadership, and communications, he oversees onboarding, relationship management, and customer satisfaction. His mission is simple: to make sure clients never feel like just a number.

Cary Showalter
Founder & CEO

With more than 20 years of IT experience, Cary founded Show Tech Solutions to bring a more personal and responsive approach to managed services. He’s passionate about helping local businesses run securely and efficiently through technology that works, without all the jargon. Cary’s commitment to excellence and community is at the heart of everything Show Tech does.

Headshot of Charles J Love
Charles J. Love
Director of Operations

Experienced technology executive with 27+ years leading and scaling managed service providers across diverse industries. Charles is widely respected for his strategic consultancy expertise and a consistent record of delivering impactful results for technology companies.

He has earned multiple industry accolades for leadership, team development, and customer excellence—underscoring his commitment to building collaborative, high-performing environments. Charles approaches every engagement with integrity, cultivating strong partnerships with both clients and internal teams.

In addition to his leadership roles, Charles serves as a trusted virtual CIO to clients, aligning technology strategy with long-term business objectives. He provides executive-level guidance across IT budgeting, risk management, digital transformation, and vendor optimization—ensuring that every decision delivers measurable business value.