Free tool
Score your CMMC Level 2 readiness in ten questions.
The same DFARS-flowdown logic that converts a stuck founder into a buyer, built into a scorer you can run in five minutes and forward to your CFO. It maps your answers against the NIST SP 800-171 control families and returns a readiness band with the gaps named in plain language. No sales call attached.
Ten questions · five minutes
Answer honestly. The scorer reads the gaps back to you.
Answer each control question Yes, Partial, or No. Partial means it exists but is not documented or not enforced everywhere. Nothing is sent and no email is asked.
Do you hold or process Controlled Unclassified Information (CUI)?
Has a prime sent you a CMMC or DFARS 252.204-7021 supplier letter?
Is your current SPRS self-assessment score posted and dated within the last year?
Do you have a written System Security Plan (SSP) covering NIST SP 800-171?
Are your MES, ERP, and SCADA environments mapped and access-controlled?
Do you have a Plan of Action and Milestones (POA&M) for open controls?
Is multi-factor authentication enforced on every system touching CUI?
Do you log and review security events across IT and OT?
Have you scoped a CUI enclave or boundary, or is CUI spread across the network?
Could you produce the evidence behind your SPRS score if a prime or a government assessor asked tomorrow?
0 of 10 answered
This is a self-assessment for your own planning. It is not a C3PAO assessment and it does not post a score to SPRS on your behalf.