CMMC Compliance Kit

The Pocket Guide to CMMC

This guide offers a high-level overview of the CMMC program so you can understand the key changes in the 2.0 version, the requirements of the different levels, and how automation can simplify the readiness process.

What’s included:

The fundamentals of the CMMC 2.0 framework
A brief overview of the certification levels and requirements, including assessment requirements

CMMC Compliance Checklists

These checklists offer a structured approach to understanding and tracking all of the major steps to achieving CMMC compliance.

What’s included:

Step-by-step checklists for Level 1 and 2 compliance
Valuable tools for evaluating your adherence to CMMC Level 1 and Level 2 requirements and your overall cybersecurity posture

System Security Plan (SSP) Template

This template offers a foundation for creating a well-documented SSP that can help streamline the CMMC assessment process and demonstrate your organization’s commitment to cybersecurity.

What’s included:

An auditor-approved system security plan template
Two examples of how you can detail current or planned implementation details for access control requirements

Plan of Actions and Milestones (POA&M) Template

This template can be used to identify and track the actions required to address gaps in your organization’s controls that were identified during an internal or third-party assessment to demonstrate ongoing efforts to achieve and maintain CMMC compliance.

What’s included:

A strategic document template that’s particularly important for higher-level CMMC certifications where continuous improvement is emphasized
One example of how you can outline an identified gap as well as associated risks, planned remediation actions, timelines, milestones, and responsible parties

Risk Mitigation Plan Template

This template can help set an organizational risk mitigation strategy and align employees and other stakeholders to it, or be used to mitigate risks for specific projects, like CMMC certification readiness.

What’s included:

Clear instructions for every section of a risk mitigation plan
Tables with pre-labeled columns for identifying and prioritizing risks

Incident Response Plan Template

Use this template to simplify the process of creating an incident response plan for your organization.

What’s included:

An auditor-approved template to simplify the process of creating an incident response plan for your organization
A defined and systematic process for responding to information security incidents