How do I know if I handle CUI or just FCI?

Your contract and the data you receive or create for the government tell you. If you are unsure, review your contract clauses and ask your contracting officer. CMMCTrack does not make that determination for you.

Can one company need both levels?

Yes, depending on the contracts you hold and the information each one involves. Each assessment in CMMCTrack is scoped to a level.

CMMC Level 1 vs Level 2 Requirements Guide

body{font-family:'Inter',sans-serif;max-width:800px;margin:40px auto;padding:0 20px;line-height:1.6}CMMC Level 1 vs Level 2: what each covers and who needs whichCompare CMMC Level 1 and Level 2 information types, requirements, assessment methods, and scoring so you can identify the path specified by your contract.Supports Level 1 (15 practices, FAR 52.204-21) and Level 2 (110 practices, NIST SP 800-171).Please enable JavaScript to use CMMCTrack.