CMMC Assessment & Readiness
Protect Your DoD Revenue.
Get clarity on CMMC requirements, CUI/FCI scoping, NIST 800-171 implementation, SPRS scoring, documentation and assessment preparation — so you can bid with confidence and grow your defense business.
Understand Your Data.
Know Your Requirements.
The type of information you handle — FCI or CUI — determines which regulations apply and what level of CMMC compliance you need.
Federal Contract Information (FCI)
Non-public information provided by the government under a contract. Governing clause: FAR 52.204-21. Typical CMMC level: Level 1.
Learn about FCI →Controlled Unclassified Information (CUI)
Sensitive information requiring safeguarding under federal regulations. Governing clause: DFARS 252.204-7012. Typical CMMC level: Level 2.
Learn about CUI →Does CMMC Apply to My Company?
Your contract clause determines your obligations. Start with the clause before assuming your industry or customer alone determines scope.
DFARS 252.204-7012
CUI protection requirement for most defense contracts.
View guidance →DFARS 252.204-7019
Requires a current NIST assessment score in SPRS where applicable.
View guidance →DFARS 252.204-7020
Supports assessment access and verification obligations.
View guidance →Current CMMC clauses
See what changed in 2026, what is suspended, and what remains enforceable.
View status →Build Your CUI Expertise
Understand, identify and protect Controlled Unclassified Information across your organization.
What Is CUI?
Definition, examples and why it matters.
Read guide →CUI Categories
Categories and examples from the CUI Registry.
Explore categories →CUI Marking
How to properly mark CUI in documents and systems.
Learn marking →Finding CUI in Your Systems
Practical steps to identify CUI in your environment.
Get the checklist →The Foundation for
CMMC Compliance
NIST SP 800-171 Rev 2 defines the 110 requirements across 14 families used as the current contractual baseline described in this build specification.
14
Control families
110
Requirements
313
Points at risk
−203
SPRS floor
From Assessment to Readiness
Get a clear, actionable roadmap to CMMC readiness with scope, scoring, documentation, evidence and implementation priorities.
CMMC Readiness Assessment
Scope, score, SSP, POA&M and evidence in one engagement.
Learn more →CMMC Gap Assessment
Score all 110 requirements and prioritize remediation.
Learn more →System Security Plan
Document the actual operating environment.
Learn more →POA&M + Evidence
Track eligible remediation and proof.
Learn more →Free Resources to Help You Comply
Practical tools and templates to assess readiness, simplify documentation and accelerate your path.
SPRS Score Calculator
Calculate your current weighted SPRS score.
Free & ungated →CMMC Level 1 Requirements
The 17 practices that protect FCI, listed.
Read guide →CMMC Readiness Checklist
30 checks to run before an assessment.
Free & ungated →CMMC Certification Cost
What compliance actually costs, line by line.
Read guide →What Changed in 2026 — and What Did Not
The site separates the current CMMC program pause from the NIST SP 800-171 and DFARS obligations that remain important to defense contractors.
Supporting Defense Contractors Across Industries
Compliance requirements vary by industry, but the governing contract and information type still drive scope.
IT & MSP
Managed providers supporting defense environments.
Learn more →Architecture, Engineering & Construction
Drawings and site plans in shared project platforms.
Learn more →Healthcare
Where HIPAA and CMMC overlap, and where they do not.
Learn more →Primes & Subcontractors
How requirements flow down the supply chain.
Learn more →Build a defensible readiness roadmap before your next contract review.
Get a clear, actionable assessment of your CUI handling, identify gaps, and receive expert guidance on your path to readiness.