Three assets that might be considered “in scope” for a CMMC Level 1 self-assessment are a laptop used to access contract documents, a server storing FCI data, and an email system used to transmit FCI.