Skip to main content

CMMC Pause: What DoW & Primes Still Require

CMMC Phase 2 on Hold: What the DoW and Primes Still Require

Read the update
sf-logo
  • Customers
  • Pricing
Sign inRequest a demo
hero-bghero-bg

CMMC Compliance Kit

Defense contractors are already seeing CMMC Phase 1 self-assessment requirements in their government contracts, so the time to start preparing for assessments and strengthening your cybersecurity program is now. But navigating the complexities of CMMC requirements is a daunting task. This free CMMC kit can help reduce the cost and complexity of implementing these requirements with templates and checklists from our team of in-house CMMC compliance experts.

What’s in the compliance kit:

  • An ebook covering the fundamentals of CMMC
  • Customizable documentation templates
  • Compliance checklists

sf-logo-2
linked-in
x-dark
youtube
  • US / English
  • Germany / Deutsch
  • Spain / Español
  • France / Française
Products
  • Secureframe Comply
  • Secureframe Defense for CMMC
  • Secureframe Trust
  • Why Secureframe?
  • Product Updates
  • Pricing
  • Secureframe Marketplace
Solutions
  • Small Business
  • Enterprise
  • Defense contractors
Frameworks
  • CMMC 2.0
  • SOC 2
  • ISO 27001
  • HIPAA
  • PCI DSS
  • CCPA
  • GDPR
  • View All
Frameworks
  • CMMC 2.0
  • SOC 2
  • ISO 27001
  • HIPAA
  • PCI DSS
  • CCPA
  • GDPR
  • View All
Partners
  • Trusted Partners
  • Auditors
  • Service Providers
  • Become a Partner
  • Explore Partners
Company
  • About
  • CareersWe’re hiring
  • Newsroom
  • Customers
  • Trust Center
Company
  • About
  • CareersWe’re hiring
  • Newsroom
  • Customers
  • Trust Center
Resources
  • Blog
  • Compliance Hubs
  • Compliance Resources
  • Guides
  • Glossary
  • Knowledge Base Extension
  • API Reference
  • GCC High Licensing
  • Microsoft License Quote
Support
  • Help
  • Contact us
  • Schedule a demo
  • Status99.99%
  • Support Metrics
  • Your privacy choicesprivacy-choices
aicpa-soc
iso-27001
ccpa
gdpr
© 2026 Secureframe. All Rights Reserved.
Terms of Service
Privacy Policy
Website Terms
Become a Secureframe Partner or Reseller

The Pocket Guide to CMMC

This guide offers a high-level overview of the CMMC program so you can understand the key changes in the 2.0 version, the requirements of the different levels, and how automation can simplify the readiness process. 

What’s included:

  • The fundamentals of the CMMC 2.0 framework
  • A brief overview of the certification levels and requirements, including assessment requirements

CMMC Compliance Checklists

These checklists offer a structured approach to understanding and tracking all of the major steps to achieving CMMC compliance.

What’s included:

  • Step-by-step checklists for Level 1 and 2 compliance
  • Valuable tools for evaluating your adherence to CMMC Level 1 and Level 2 requirements and your overall cybersecurity posture

System Security Plan (SSP) Template

This template offers a foundation for creating a well-documented SSP that can help streamline the CMMC assessment process and demonstrate your organization’s commitment to cybersecurity.

What’s included:

  • An auditor-approved system security plan template 
  • Two examples of how you can detail current or planned implementation details for access control requirements

Plan of Actions and Milestones (POA&M) Template

This template can be used to identify and track the actions required to address gaps in your organization’s controls that were identified during an internal or third-party assessment to demonstrate ongoing efforts to achieve and maintain CMMC compliance.

What’s included:

  • A strategic document template that’s particularly important for higher-level CMMC certifications where continuous improvement is emphasized
  • One example of how you can outline an identified gap as well as associated risks, planned remediation actions, timelines, milestones, and responsible parties

Risk Mitigation Plan Template

This template can help set an organizational risk mitigation strategy and align employees and other stakeholders to it, or be used to mitigate risks for specific projects, like CMMC certification readiness. 

What’s included:

  • Clear instructions for every section of a risk mitigation plan
  • Tables with pre-labeled columns for identifying and prioritizing risks

Incident Response Plan Template

Use this template to simplify the process of creating an incident response plan for your organization.

What’s included:

  • An auditor-approved template to simplify the process of creating an incident response plan for your organization
  • A defined and systematic process for responding to information security incidents