Assessment Lifecycle
CMMC Level 2 phase model — based on the 32 CFR 170 lifecycle and NIST 800-171A methodology.
Assessments
NIST SP 800-171 Rev 2 — 14 families, 110 requirements
0
Total
0
Self
0
C3PAO
0
Complete
| Assessment Name | Organization | Type | Status | Level | Started |
|---|
Organizations
Manage assessed organizations and personnel
| Organization | CAGE Code | DUNS/UEI | Contact | Personnel |
|---|
Assessment Overview
Assessment Scoping
Define what's in scope per the CMMC L2 scoping methodology — every asset categorized, every CUI flow documented.
Family
Req. ID
Requirement Name
Status
Points
SO
Security Objectives
▾
SSP Workspace
Capture working notes (interviews, configs, policy refs), then consolidate into the polished Implementation Statement that exports to the SSP.
DS
Determination Statements (NIST 800-171A)
▾
Supporting Documents
▾
No file chosen
REF
Assessment Methods & Objects (NIST 800-171A reference)
▾
Activity
Every change to this requirement — who, when, and what changed
Plan of Action & Milestones
| Req ID | Requirement | Owner | Risk | Milestones | Expected Completion | Status |
|---|
Documents
Every document uploaded for this assessment — versioned, with audit trail and per-item back-references.
My Tasks
Determination Statements assigned to you across every assessment in this tenant.
Evidence Requests
Send a focused question + upload link to an SME without giving them an account.
Prime Submissions
Share a snapshot of this assessment's CMMC status with a DoD prime contractor (Lockheed, Boeing, etc.) — they download it via a time-limited share link, no account required.
Gap Management
| Req ID | Requirement | Family | Owner | Difficulty | Created | Expected Close | Status |
|---|
System Security Plan
Implementation statements for all 110 requirements
0
Total SRs
0
With Statement
0%
Complete
0
Met