CMMC Compliance Resources
Download free Word document templates, checklists, and guides to support your CMMC 2.0 certification journey — from discovery through assessment.
Discovery & Scoping
Determine whether CMMC applies to your organization and understand the types of information you handle.
CMMC Applicability Decision Flowchart
Visual guide to determine if CMMC certification applies to your contracts.
FCI vs CUI Quick Reference Guide
Understand the difference between Federal Contract Information and Controlled Unclassified Information.
Regulatory Foundation
Review the contractual and regulatory language that drives CMMC requirements.
Contract Language Review Checklist
Check your DoD contracts for DFARS 7012, 7019, 7020, and 7021 clauses.
NIST 800-171 Controls
Master the 110 security controls that form the backbone of CMMC Level 2 compliance.
NIST 800-171 — 110 Controls Quick Reference Matrix
Complete matrix of all 110 controls with descriptions, organized by family.
SPRS Scoring
Calculate, understand, and submit your Supplier Performance Risk System score.
SPRS Score Submission Guide
Step-by-step instructions for submitting your SPRS score to the DoD.
Key Documents & Concepts
Core document frameworks every contractor needs before starting their assessment.
SSP Outline & Section Guide
Understand the structure and sections of a System Security Plan.
POA&M Starter Worksheet
Begin tracking your Plan of Action & Milestones for remediation items.
CUI Boundary Identification Worksheet
Map where CUI enters, flows through, and exits your environment.
Organization-Defined Parameters Reference
Reference list for parameters your organization must define per NIST 800-171.
Level 1 — Foundational (FCI)
17 practices for contractors handling Federal Contract Information only.
Level 1 — 17 Practices Plain Language Guide
All 17 Level 1 practices explained in clear, everyday language.
Level 1 SSP Template
Ready-to-use System Security Plan template for Level 1 self-assessment.
Level 1 Self-Assessment Scoring Worksheet
Score each of the 17 practices and track your Level 1 readiness.
Level 1 Affirmation Checklist
Final checklist before submitting your Level 1 affirmation in SPRS.
Level 2 — Advanced (CUI)
Comprehensive documentation and assessment tools for CMMC Level 2 compliance with NIST 800-171.
CUI Data Flow Mapping Template
Map how CUI moves through your systems, people, and processes.
Level 2 Self-Assessment Gap Tracker
Track compliance gaps across all 110 NIST 800-171 controls.
SPRS Scoring Calculator Worksheet
Calculate your SPRS score with weighted values for each control.
Remediation Priority Matrix
Prioritize remediation efforts based on risk, cost, and complexity.
CMMC Policy Document Pack — Sample Policy
Sample policy template aligned to CMMC practice domains.
Procedure Writing Guide & Template
Guide for writing compliant procedures with a reusable template.
Level 2 SSP Template
Comprehensive System Security Plan template covering all 110 controls.
CMMC-Compliant POA&M Template
Formal Plan of Action & Milestones template meeting CMMC requirements.
Evidence Collection Guide & Checklist
Know what evidence to collect for each control family during assessment.
Level 2 Affirmation & Submission Checklist
Final checklist before affirming Level 2 compliance in SPRS.
Continuous Monitoring Plan Template
Maintain ongoing compliance with a structured monitoring plan.
C3PAO Assessment Preparation
Get ready for your third-party assessment with targeted preparation tools.
Self-Assessment to C3PAO Readiness Gap Checklist
Bridge the gap between self-assessment and third-party certification readiness.
Planning & Roadmap
High-level planning resources to guide your entire CMMC compliance journey.
CMMC Compliance Roadmap Planner
Plan your complete path to CMMC certification with milestones and timelines.
Complete CMMC Document Bundle Overview
Master index of all 27 documents and how they fit into your compliance program.
Get the Full CMMC Training
These resources are companion materials to our CMMC 2.0 course. Enroll to learn how to use each document and build a complete compliance program.