Steegle.One Intranet for Google Workspace

Google Workspace Security for CMMC Level 1

CMMC Assist for Google Workspace

Steegle helps you review your Google Workspace security configuration against the 15 basic safeguarding requirements in CMMC Level 1, identify gaps, and create a clear action plan so you can approach your self-assessment with confidence.

Sales Hotlines

US ✆ +1 (302) 672 3007

UK ✆ +44 (207) 871 5021

Prepare for CMMC Level 1 Without Getting Lost in Complexity

The Cybersecurity Maturity Model Certification (CMMC) is a U.S. Department of Defense framework that ensures contractors meet essential cybersecurity standards before handling federal information.

For smaller defense contractors, subcontractors, and suppliers, the process can feel overwhelming. Steegle’s CMMC Assist makes it straightforward by reviewing your Google Workspace environment against the required safeguards, helping you stay compliant with clarity and confidence.

We focus on what can be checked and improved inside Google Workspace:

A hand presses its thumb against a shield‑shaped fingerprint scanner for authentication.

Identity & Authentication

User accounts should be verified and managed properly.

A woman holds a smartphone while seated beside a desktop monitor displaying a security icon.

Administrator Roles

Admin privileges must follow least-privilege principles.

A woman gestures toward Google Drive with her right hand, tilting her head left in a questioning pose about sharing permissions.

Google Drive Sharing

Drive sharing settings should prevent oversharing outside the organization.

Google Groups

Review group settings to prevent unintended exposure.

A smartphone screen shows a two‑factor authentication (2FA) input interface with numeric dials for code entry.

MFA Enforcement

Multi-factor authentication blocks access even if passwords are stolen.

A businessman smiles while talking on a cellphone with his left hand and using a tablet with his right hand, as Google security icons appear on the left.

Security Settings

Workspace security configurations must align with organizational policies.

What is CMMC?

The Cybersecurity Maturity Model Certification (CMMC) defines a tiered approach to cybersecurity, giving defense contractors a clear path to strengthen protections based on the sensitivity of the information they manage.

CMMC 2.0 is organized into three levels of maturity:

Level 1 is the baseline for most small contractors and subcontractors, focused on basic cyber hygiene to safeguard Federal Contract Information (FCI).
Level 2 applies to companies that manage Controlled Unclassified Information (CUI) and requires compliance with NIST SP 800-171.
Level 3 is reserved for the most sensitive contracts, adding advanced protections from NIST SP 800-172.

By defining these levels, CMMC provides a clear path for organizations to strengthen their cybersecurity practices in proportion to the sensitivity of the data they manage.

Steegle’s CMMC Level 1 and Level 2 Readiness Support

Who needs CMMC Level 1?

CMMC Level 1 applies to organizations that handle Federal Contract Information (FCI) as part of a US Department of Defense contract. If any of the following apply to your organization, you will likely need CMMC Level 1 self-assessment:

A Level 1 Foundation CMMC badge is displayed in the foreground, with business investors visible in the background.

You hold a DoD contract or subcontract involving Federal Contract Information.
You are a supplier or subcontractor in a DoD prime contractor's supply chain.
You are bidding for a DoD contract that references DFARS 252.204-7021.
You are a small business or specialist provider working with defence primes.
You use Google Workspace as your primary productivity and collaboration platform.

What's Included in CMMC Assist

A one-day engagement including a half-day face-to-face session, delivered by a Steegle Google Workspace specialist.

Security Configuration Review

Review your Google Admin console settings including user access controls, MFA enforcement, password policies and administrator role assignments.

Drive and Sharing Review

Check Google Drive settings, Shared Drives, external sharing rules, collaboration controls, and access policies to reduce risks and strengthen compliance.

A person takes a call while looking at their desktop, with “Cyber Security” shown on the screen.

CMMC Level 1 Gap Discussion

Walk through each safeguarding requirement to see how Google Workspace supports readiness, and identify where additional action may still be required.

Action plan written in a notebook, underlined with a green marker.

Prioritized Action Plan

Receive clear, practical recommendations your organization can easily understand and act on, arranged by priority to guide effective cybersecurity readiness.

Google Meet consultation with four clients.

Face-to-Face Consultation

Half-day on-site session with a Google Workspace specialist who will review findings with you, answer questions, and guide you through the next steps.

A person works on a laptop as a virtual 3D screen appears in front, showing checkmarks.

Evidence Guidance

Guidance on screenshots, configuration records and documentation that may support your CMMC Level 1 self-assessment and annual affirmation.

CMMC Assist One Day Engagement at a Fixed Price of $1,495 with Face to Face Consultation

A full day's engagement including a half-day face-to-face session with a Steegle Google Workspace specialist, plus preparation, analysis and your prioritised action plan. Concessionary pricing available.

How CMMC Assist Works

A one-day engagement built around a half-day face-to-face consultation with a Steegle Google Workspace specialist. Your administrator stays in control of the Admin console throughout.

Discovery Call

We confirm your Google Workspace setup, user count, edition and CMMC readiness goals. We agree a date for the face-to-face session.

Second step face-to-face meeting icon with arrow pointing right.

Face-to-Face Review

Half-day on-site session with your administrator, covering security, sharing, identity, authentication, and admin settings in Google Admin.

Gap Discussion

We walk through 15 CMMC Level 1 requirements, covering Workspace settings and topics like physical security and media protection.

Action Plan

Following the session, you receive practical findings, a prioritized improvement plan, and clear guidance on next steps.

Why Steegle for CMMC Readiness?

Retro photo of Steegle highlighting Google Workspace expertise since 2008.

A Throwback to Steegle in 2008, Showcasing its Early Google Workspace Expertise

Steegle’s Google Workspace Expertise

Steegle has specialised in Google Workspace since 2008. As a Google Cloud Build Partner, we don’t just resell licences; we build, configure, and secure Google Workspace environments for organisations across the US and UK.

We understand how Google Workspace is used in the real world, not just how it appears on a compliance checklist. That practical knowledge makes our CMMC readiness support actionable rather than theoretical.

Our team includes specialist Google Workspace architects and consultants who work hands-on with Admin console security, Google Drive governance, and access control every day.

Frequently Asked Questions

Can Google Workspace support CMMC Level 1 compliance?

Yes. Google Workspace provides controls for identity, multi‑factor authentication, access management, sharing restrictions, audit logging and administrator roles that map to many of the 15 basic safeguarding requirements in CMMC Level 1 (FAR 52.204‑21). Some requirements relate to physical security, media protection or other processes outside Google Workspace. Our consultant will discuss these with you and record observations during the session.

What is the difference between CMMC Level 1 and Level 2?

CMMC Level 1 covers 15 basic cyber hygiene requirements from FAR 52.204-21 and is self-assessed annually by the organisation. Level 2 covers 110 security requirements from NIST SP 800-171 and typically requires a third-party assessment by a C3PAO. CMMC Assist focuses on Level 1 readiness support.

Is CMMC Assist a formal CMMC audit or certification?

No. CMMC Assist is a practical readiness support service delivered by a Google Workspace specialist. Steegle does not act as a CMMC assessor and does not provide certification, formal compliance attestation or legal advice. The service helps your organisation review Google Workspace settings, identify gaps and create a prioritised action plan to support your own CMMC Level 1 self-assessment.

How long does the CMMC Assist engagement take?

CMMC Assist is a one-day engagement. This includes a half-day face-to-face session with your administrator at your premises, plus Steegle's preparation time, analysis and delivery of your prioritised action plan.

What do I need to prepare before the session?

You should have your nominated Google Workspace administrator available for the half-day face-to-face session with working Admin console access. It helps if you have a general awareness of the 15 CMMC Level 1 requirements and any CMMC readiness work you have already done. We will cover preparation in more detail during the discovery call.

Do I need to be a defence contractor to use this service?

CMMC applies to organisations in the US defence supply chain, including prime contractors, subcontractors and suppliers handling Federal Contract Information (FCI). If you hold or are bidding for a DoD contract that references CMMC Level 1, this service is designed for you.

Is the fixed price suitable for any size of organisation?

CMMC Assist at £2,495 is designed for small and medium-sized organisations. Concessionary pricing is available for eligible organisations. If your environment is larger or more complex, please contact us to discuss a tailored engagement.

What if the review identifies gaps that need further work?

If the session identifies areas that would benefit from further review, remediation or configuration work, Steegle can discuss additional support separately. There is no obligation to proceed beyond the CMMC Assist engagement.

Ready to Strengthen Your CMMC Readiness?

If your organisation uses Google Workspace and needs CMMC Level 1 readiness support, CMMC Assist is available from £2,495 including a half-day face-to-face consultation. Concessionary pricing available.

Book a Free Discovery Call

*CMMC Assist is a practical readiness support service. It is not a formal CMMC audit, certification assessment, or legal opinion. The client remains responsible for its own CMMC Level 1 self‑assessment, evidence retention and any required submission.

Page updated

Report abuse