CMMC Compliance Kit
Defense contractors could begin seeing CMMC 2.0 requirements incorporated into all government contracts as early as 2025, so the time to start preparing for certification is now. But navigating the complexities of CMMC requirements is a daunting task, especially with the recent updates to the framework. This free CMMC kit can help simplify your readiness work with templates and checklists from our team of in-house federal compliance experts.
What’s in the compliance kit:
- An ebook covering the fundamentals of CMMC
- Customizable documentation templates
- Compliance checklists
The Pocket Guide to CMMC
This guide offers a high-level overview of the CMMC program so you can understand the key changes in the 2.0 version, the requirements of the different levels, and how automation can simplify the readiness process.
What’s included:
- The fundamentals of the CMMC 2.0 framework
- A brief overview of the certification levels and requirements, including assessment requirements
CMMC Compliance Checklists
These checklists offer a structured approach to understanding and tracking all of the major steps to achieving CMMC compliance.
What’s included:
- Step-by-step checklists for Level 1 and 2 compliance
- Valuable tools for evaluating your adherence to CMMC Level 1 and Level 2 requirements and your overall cybersecurity posture
System Security Plan (SSP) Template
This template offers a foundation for creating a well-documented SSP that can help streamline the CMMC assessment process and demonstrate your organization’s commitment to cybersecurity.
What’s included:
- An auditor-approved system security plan template
- Two examples of how you can detail current or planned implementation details for access control requirements
Plan of Actions and Milestones (POA&M) Template
This template can be used to identify and track the actions required to address gaps in your organization’s controls that were identified during an internal or third-party assessment to demonstrate ongoing efforts to achieve and maintain CMMC compliance.
What’s included:
- A strategic document template that’s particularly important for higher-level CMMC certifications where continuous improvement is emphasized
- One example of how you can outline an identified gap as well as associated risks, planned remediation actions, timelines, milestones, and responsible parties
Risk Mitigation Plan Template
This template can help set an organizational risk mitigation strategy and align employees and other stakeholders to it, or be used to mitigate risks for specific projects, like CMMC certification readiness.
What’s included:
- Clear instructions for every section of a risk mitigation plan
- Tables with pre-labeled columns for identifying and prioritizing risks
Incident Response Plan Template
Use this template to simplify the process of creating an incident response plan for your organization.
What’s included:
- An auditor-approved template to simplify the process of creating an incident response plan for your organization
- A defined and systematic process for responding to information security incidents
