Tools
11 tools in 3 topics
Checklists, worksheets and calculators for the work a small shop does itself: finding the CUI, drawing the boundary around it, scoring against NIST SP 800-171 and writing the documents an assessor reads. Free, no account, no sign-up.
- Which CMMC level do I need?Five questions on your information, clauses and role give the CMMC level, the assessment type and what applies today.
- CMMC scoping worksheetList every asset, sort it into the 32 CFR 170.19 Level 2 categories, and export the inventory for your SSP.
- ITAR compliance checklistA printable self-check for small manufacturers: DDTC registration, USML, deemed exports, encryption, licences, records.
- Is it CUI?Six questions on one drawing, spec, email or CAM file give CUI, FCI, public or ask, with the rule for each step.
- SPRS score calculatorTick the 800-171 requirements you have not met: your SPRS score from 110, the 88 line and which gaps may go on a POA&M.
- CMMC Level 1 self-assessment checklistThe 15 FAR 52.204-21 requirements, met, not met or N/A, with evidence notes and the yearly SPRS affirmation.
- NIST SP 800-171 checklist (CMMC Level 2)All 110 Rev 2 requirements and their 800-171A objectives: mark met, partial, not met or N/A, then export a CSV or print.
- CMMC cost estimatorDoD's own per-assessment cost figures from the CMMC final rule, by level, path and business size, beside your quotes.
- POA&M template builderBuild a CMMC POA&M row by row, checked against 32 CFR 170.21: the 88-point minimum, 1-point gaps only, 180-day closeout.
- System security plan (SSP) templateFill in the SSP that NIST 800-171 3.12.4 asks for, checked against its eight assessment objectives.
- CMMC policy templatesFourteen NIST SP 800-171 policies built from your shop's details, every clause tagged with the requirement it covers.