CMMC 2.0 Self-Assessment Workbook & Scorecard — For Defense Contractors and Subcontractors
If your organization handles Federal Contract Information or Controlled Unclassified Information under a DoD contract, you need a CMMC assessment. This workbook gives you the structure to do it yourself.Built for small defense contractors and subcontractors without dedicated compliance teams. No jargon. No filler. Every page is a working document.WHAT'S INSIDE— Scope Decision Page: Determine whether you need Level 1, Level 2, or both — in two minutes.— SPRS Explainer: What the Supplier Performance Risk System is, how scoring works, what contracting officers see, and how to submit.— CMMC Level 1 Checklist: All 15 FAR 52.204-21 requirements with Met / Not Met / N/A scoring — aligned to the current 32 CFR rule.— NIST 800-171 Full Assessment: All 110 controls across 14 domains. Plain-English descriptions, three-point DoD scoring, and an evidence column for every control.— Score Calculator & SPRS Summary: Calculate your estimated score, document your assessment scope, and confirm submission readiness.— Gap Analysis Worksheet: Prioritize every Not Met finding by risk level. Assign owners and target dates. Track remediation.— Executive Snapshot: A one-page compliance summary ready to present to leadership, a prime contractor, or a contracting officer.— Glossary, Cross-References & Next Steps: Key terms, official resources, and a clear path forward based on your results.WHO THIS IS FORSmall defense contractors and subcontractors (under 200 employees) who need to assess their CMMC compliance posture without hiring a consultant. Whether you're preparing for a Level 1 self-attestation or building toward a Level 2 C3PAO assessment, this workbook walks you through the process control by control.FORMATFillable PDF. Complete it on-screen or print and fill by hand. Retain it as part of your compliance documentation alongside your System Security Plan and POA&M.
Get it → cyberzvi.gumroad.com