CMMC Phase 2 suspended July 13, 2026 — NIST SP 800-171 Rev 2 obligations remain in forceView Program Status
Clause-based decision tool

CMMC Level Finder

Use your contract clauses and information type to identify the CMMC level that most likely applies.

Key facts
  • The decision starts with clauses, not industry
  • FCI points toward Level 1
  • CUI points toward Level 2

How the level finder works

The tool asks about FAR 52.204-21 and the DFARS 7012, 7019, 7020 and 7021 clauses, then asks whether the environment handles FCI, CUI or both.

Why this is better than an industry quiz

Two companies in the same industry can have completely different obligations because one receives controlled technical information and the other does not. Contract and data signals are more reliable than a generic sector label.

Use the result as a starting point

The result is not legal advice or a certification decision. It is a structured way to identify what needs to be verified next in the contract and data flow.

Ready to move forward?

Turn the requirement into a defensible roadmap.

Start a readiness assessment
Do it yourself, or get help

Everything on this site is free to use on your own.

If you would rather have someone check your work or take it off your plate, that is what we do. Readiness only — we do not certify, and we will tell you plainly where you stand.