How close are you to CMMC Level 1?

Is antivirus or anti-malware running on every computer in your shop?

Windows Defender counts. It just has to be turned on and updating.

Do you have a firewall between your network and the internet?

A business-grade router with firewall, SonicWall, Fortinet, pfSense, or similar.

Does every person log in with their own unique username and a real password?

No shared logins, no "shop1" accounts, no sticky-note passwords.

Are people limited to only the files and systems their job requires?

The bookkeeper can't open DoD drawings. The machinist can't see payroll.

Is your building locked when employees aren't there, with the server room secured?

Locked doors, controlled entry, and the server closet has its own lock.