ComplyUSAIndependent CMMC Level 2 Assessments

Free self-assessment

Estimate your SPRS score

A quick, plain-language estimate of where your NIST SP 800-171 self-score may land today. This is a free starting point — not an official SPRS score and not a substitute for a CMMC Level 2 assessment.

1. Access control

Could you show an auditor, today, everyone who has access to your systems and the approval that granted each person that access?

2. System & communications protection

Is your network boundary locked down, with default-deny firewalls, CUI systems segmented from everything else, and remote access only through approved, monitored connections?

3. Identity & authentication

Does every person have their own named account, with shared accounts prohibited and multi-factor authentication required at every sign-in?

4. Audit & monitoring

Are audit logs captured, reviewed and documented on a regular schedule, with alerts if logging ever stops?

5. Data protection

Is CUI protected with FIPS-validated encryption in transit and at rest on every system and device that stores or sends it, with the FIPS certificates on file?

How this works: each domain contributes equally to a simple model of the NIST SP 800-171 self-score scale, so the result is shown as a range, not a score. Your real SPRS score depends on which specific controls are met and the weighting in the official SPRS methodology — a mock assessment produces a defensible, control-by-control result.

Turn an estimate into a defensible record.

A mock assessment evaluates all 320 objectives and tells you exactly where you'd score on assessment day.

Schedule a CallFree SPRS estimate

No commitment · Mock fees credited toward certification · Response within 1 business day

SPRS estimateSchedule a Call