FAR 52.204-21 Basic Safeguarding of Covered Contractor Information Systems List of 15 basic controls required by CMMC Level 1. Direct link