Resources · 9 free tools
Free tools for Level 2 work, built the way we work.
Each one answers a real question about CMMC Level 2 and NIST SP 800-171 in a few minutes, runs in your browser, and ends with one recommended next step. Pick by who you are, or by where you're headed.
Your answers stay in your browser. We only keep your name, email and company if you ask for a download.
Showing 9 of 9 free tools.
Defense contractors · Interactive tool
Level 2 Self-Check
Twenty questions, a readiness band and your top gaps, with the next step that fits your platform.
You get: PDF report
Open the tool →
Leads to: Microsoft 365 Hardening, Level 2 Readiness AssessmentDefense contractors · Interactive tool
Microsoft 365 Tenant Fit Check
Your tenant type, licences and seats against each hardening step: what's covered and what to confirm.
You get: PDF report
Open the tool →
Leads to: Microsoft 365 Hardening, Level 2 Readiness AssessmentDefense contractors · Interactive tool
Microsoft 365 Hardening Blueprint
The four-week hardening map: each step's feature, licence, evidence and the NIST SP 800-171 requirements it supports.
You get: Poster PDF + Excel tracker
Open the tool →
Leads to: Microsoft 365 HardeningDefense contractors · Interactive tool
CUI Boundary Sketcher
Say where CUI goes and see your boundary drawn in the CMMC asset categories.
You get: PDF sketch
Open the tool →
Leads to: Level 2 Readiness AssessmentDefense contractors · Interactive tool
Cloud Provider Check
Which cloud services hold CUI, and what DFARS 7012 asks you to keep on file for each.
You get: PDF report
Open the tool →
Leads to: Level 2 Readiness AssessmentDefense contractors · Interactive tool
SSP Red-Flag Review
Twenty-five questions about your System Security Plan, never an upload; red flags on a drawing of the plan.
You get: SSP outline (Word) + PDF
Open the tool →
Leads to: SSP & POA&M Buildout, Level 2 Readiness AssessmentDefense contractors · Interactive tool
POA&M Eligibility Checker
Which gaps may sit on a Level 2 POA&M, the 80% test and the 180-day clock.
You get: PDF report
Open the tool →
Leads to: SSP & POA&M Buildout, Level 2 Readiness Assessment, Fractional CMMC Program LeadDefense contractors · Interactive tool
Level 2 Program Calendar
Twelve months of program tasks, dated from your affirmation month, with a calendar file.
You get: PDF, Excel and .ics
Open the tool →
Leads to: Fractional CMMC Program LeadDefense contractors · Guide
Affirming Official Brief
What your senior official signs in SPRS, in ten plain steps, with your dates.
You get: Two-page PDF
Open the guide →
Leads to: Fractional CMMC Program Lead
Prefer to read?