Skip to main content

CMMC Pause: What DoW & Primes Still Require

Secureframe

Are you ready for your
CMMC assessment?

Answer a series of questions tailored to your CMMC Level to get an approximate readiness score, estimated SPRS score, and a prioritized gap analysis in under 5 minutes.

~5 minutes11 NIST 800-171 domain areasPersonalized results
Phase 1 of 3: Contract context
Question 1 of 25
Does your organization hold or pursue Department of Defense (DoD) contracts?

This determines whether CMMC applies to you at all. All DoD prime contractors and subcontractors in the defense industrial base (DIB) are subject to CMMC.

This assessment provides general readiness guidance based on self-reported responses across 11 of the 14 NIST 800-171 control families. It does not cover the Maintenance (MA), Personnel Security (PS), or Physical Protection (PE) families, and samples 2 representative questions per domain. SPRS score estimates are approximations only. This tool does not constitute legal or compliance advice, and is not a substitute for a formal CMMC assessment by a certified C3PAO. Requirements are also subject to change as regulations evolve. Always review your contracts and consult a qualified compliance or legal advisor. Talk to a Secureframe expert →

Close licensing gaps in the Secureframe Marketplace

Microsoft License CatalogBrowse Microsoft 365, Defender, Purview, and Dynamics 365 licenses with transparent MSRP pricing.GCC High LicensingMicrosoft 365 GCC High licenses for CMMC compliance and handling CUI as a defense contractor.Get a License QuoteRequest a quote from our licensing team and hear back within one business day.