YouProveIt - Free Assessment

Your DoD contract now requires CMMC. A consultant quoted you five figures. Here's the third option.The CMMC final rule took effect November 10, 2025. If your company handles Federal Contract Information, new solicitations can already require a Level 1 self-assessment — and Phase 2 begins November 10, 2026, when requirements tighten further. Contractors without a current CMMC status in SPRS are ineligible for award.The documentation isn't hard. It's just tedious, unfamiliar, and easy to get wrong — and most templates online still cite clause numbers that were eliminated in the February 2026 FAR overhaul.What's inside:- System Security Plan (SSP) template — the master document, structured section-by-section with fill-in-the-bracket fields and margin notes explaining what assessors actually look for- Evidence Tracker (Excel) — all 15 Level 1 requirements pre-loaded with a live readiness dashboard, status dropdowns, and evidence-location columns- Current clause mapping — FAR 52.240-93 (formerly 52.204-21), DFARS 252.204-7012, -7021, -7025, and 252.240-7997, with the renumbering explained so your documents don't look stale- Built-in guardrails — flags the rules that trip people up: no POA&Ms permitted at Level 1, the annual SPRS affirmation, and False Claims Act exposure for inaccurate affirmationsWho it's for: small DoD contractors and subcontractors handling FCI (machine shops, logistics, professional services, parts suppliers) and the IT providers who support them.Who it's NOT for: companies handling CUI need Level 2 (110 controls). That's our full Audit-Proof Stack — coming soon; join the email list at checkout.Why trust it: built by a security practitioner with hands-on compliance documentation experience across federal frameworks. Updated quarterly — buyers get all updates free, forever. The changelog is visible in every document.The math: a consultant charges $10,000–15,000 to produce these same documents. Your time to complete this kit: one focused weekend. $99.Disclaimer: documentation templates and educational aid only — not legal, contractual, or compliance advice. Use does not guarantee assessment outcomes. Verify requirements against your specific contracts and 32 CFR Part 170; consult a CMMC Registered Practitioner or federal-contracts attorney as needed.## FAQ Section (Gumroad supports this — include it)Q: Will this get me certified?A: Level 1 uses annual self-assessment, not third-party certification. This kit produces the documentation that self-assessment and your SPRS affirmation are based on. The work of implementing the controls is still yours.Q: Is this current?A: Yes — mapped to the CMMC final rule (32 CFR Part 170, DFARS rule effective Nov 10, 2025) and the February 2026 FAR/DFARS clause renumbering. Updated quarterly; updates are free for all buyers.Q: I handle CUI, not just FCI. Is Level 1 enough?A: No — CUI requires Level 2 (110 NIST SP 800-171 controls). Join the email list for the Level 2 edition.Q: What format are the files?A: SSP in Word (.docx), Evidence Tracker in Excel (.xlsx). Fully editable, no branding lock.Q: Refunds?A: 14-day no-questions refund. If it doesn't save you 10x its price in time, you shouldn't pay for it.

Found on Devadex — the discovery index for independent software the big search engines bury. More from gumroad.

Report this listing