Scope confirmation
Define the assessment boundary, identify CUI assets, and confirm the in-scope systems, people, and facilities.
Services
The CMMC Level 2 assessment engagement
A structured assessment of your environment against NIST SP 800-171, delivered by an independent assessment team. Each engagement follows a defined sequence so contractors know what to expect, what evidence is required, and how findings are documented.
Control assessment against NIST SP 800-171
Evaluate each of the 110 security requirements and their underlying assessment objectives in accordance with NIST SP 800-171A.
Evidence review
Examine policies, system configurations, and operational artifacts. Conduct interviews and observe controls in practice.
Findings and reporting
Document each objective as MET, NOT MET or not applicable with traceable evidence, supporting a defensible assessment record.
Deliverables
Final assessment report, SPRS-aligned score documentation, and the supporting artifacts required for the certification path.
Who it's for
DoD prime contractors and subcontractors that handle CUI under DFARS 252.204-7012 and are working toward CMMC Level 2.
See exactly how you would score — before the stakes are real.
Start with a mock assessment that uses the same NIST SP 800-171A methodology as the certification engagement.
No commitment · Mock fees credited toward certification · Response within 1 business day