CMMC Level 1 will be a self-attestation for those OSCs dealing with Federal Contract Information (FCI). There are some OSCs that would like to have a C3PAO conduct there certification assessment, but the DoD has not decided if that will be allowed.