# CMMC Compliance Kit

> Use this free CMMC kit to simplify your CMMC readiness work with templates and checklists from our team of in-house federal compliance experts.

canonical: https://secureframe.com/cmmc-compliance-kit

- ### The Pocket Guide to CMMC — This guide offers a high-level overview of the CMMC program so you can understand the key changes in the 2.0 version, the requirements of the different levels, and how automation can simplify the readiness process. 

What’s included:

- The fundamentals of the CMMC 2.0 framework
- A brief overview of the certification levels and requirements, including assessment requirements
- ### CMMC Compliance Checklists — These checklists offer a structured approach to understanding and tracking all of the major steps to achieving CMMC compliance.

What’s included:

- Step-by-step checklists for Level 1 and 2 compliance
- Valuable tools for evaluating your adherence to CMMC Level 1 and Level 2 requirements and your overall cybersecurity posture
- ### System Security Plan (SSP) Template — This template offers a foundation for creating a well-documented SSP that can help streamline the CMMC assessment process and demonstrate your organization’s commitment to cybersecurity.

What’s included:

- An auditor-approved system security plan template 
- Two examples of how you can detail current or planned implementation details for access control requirements
- ### Plan of Actions and Milestones (POA&M) Template — This template can be used to identify and track the actions required to address gaps in your organization’s controls that were identified during an internal or third-party assessment to demonstrate ongoing efforts to achieve and maintain CMMC compliance.

What’s included:

- A strategic document template that’s particularly important for higher-level CMMC certifications where continuous improvement is emphasized
- One example of how you can outline an identified gap as well as associated risks, planned remediation actions, timelines, milestones, and responsible parties
- ### Risk Mitigation Plan Template — This template can help set an organizational risk mitigation strategy and align employees and other stakeholders to it, or be used to mitigate risks for specific projects, like CMMC certification readiness. 

What’s included:

- Clear instructions for every section of a risk mitigation plan
- Tables with pre-labeled columns for identifying and prioritizing risks
- ### Incident Response Plan Template — Use this template to simplify the process of creating an incident response plan for your organization.

What’s included:

- An auditor-approved template to simplify the process of creating an incident response plan for your organization
- A defined and systematic process for responding to information security incidents