A simple path from sign-up to a finished self-assessment
KB-039 | Applies to: All plans | Last reviewed: October 7, 2026
If you just signed up and are not sure where to begin, this guide walks you through the order most small shops follow. You do not need to be technical, and you do not need to finish everything in one sitting. Most companies work through it a little at a time over a few weeks.
Step 1: Take or review the Readiness Check
The Readiness Check is a short set of plain-language questions about how your company handles its computers, accounts, office, and paperwork. It gives you a quick picture of where you stand on the 15 CMMC Level 1 requirements. If you took it before signing up, review your results. If not, take it first. See KB-004: How do I take the Readiness Check?
Step 2: Invite the people who will help
Most shops split the work between the owner, an office manager, and an IT provider or internal IT person. The account owner can add people with one of three roles:
- Read-only: can view progress but cannot change anything. Good for the person who will sign the annual affirmation and wants to review.
- Editor: can work through requirements and add evidence entries. Good for your office manager or IT provider.
- Owner: full control of the account, including billing and users. Keep this to one or two trusted people.
Step 3: Set up your evidence folder
Before you start collecting, create one folder in a system your company already uses, such as SharePoint, OneDrive, Google Drive, Dropbox, or a shared drive on your office server. AffirmReady does not store your files. Your evidence stays in your own system, and AffirmReady keeps track of where each item lives.
We have a free folder kit that sets this up for you in a couple of minutes. See KB-040: Set up your evidence folder with the AffirmReady folder kit, then the guide for your system:
- KB-041: Evidence folder setup in SharePoint or OneDrive
- KB-042: Evidence folder setup in Google Drive
- KB-043: Evidence folder setup in Dropbox
Step 4: Work through the requirements
Open the guided walkthrough and take the requirements one at a time. Each one explains, in plain language, what the requirement asks for and what evidence usually shows it is in place. Start with the ones you already know you handle, such as locking the office or running antivirus. Quick wins build momentum.
If an IT provider manages your systems, send them KB-038: Evidence Request for Your IT Provider early. Their part often takes the longest, so it helps to start it in parallel.
Step 5: Record each piece of evidence
As you save each item in your evidence folder, add an entry for it in AffirmReady with a short description, who owns it, when to review it, and a link to where it is saved. See KB-013: How do I record where my evidence lives? and KB-044: How to get the right link for your evidence.
Step 6: Review and prepare to affirm
When every requirement shows evidence, your affirming official (usually the owner or a senior leader) reviews the results and the evidence. If anything shows a gap, fix it before affirming. Your company then enters its self-assessment results and the annual affirmation in SPRS. AffirmReady helps you get ready for that step, but the affirmation itself is made by your company in SPRS.
AffirmReady helps you prepare for CMMC Level 1. It does not guarantee compliance or a contract award, and your company remains responsible for the accuracy of its self-assessment and affirmation.
Still need help?
Email support@affirmready.com and include your company name and the email address on your AffirmReady account. Our team is available Monday through Friday, 8:00 AM to 5:00 PM Eastern, and replies within one business day.
For CMMC Level 1 readiness purposes only. Not legal advice. Your company is responsible for the accuracy of its self-assessment and affirmation.