Assessment Operations · CMMC Level 2
Athena — the operating system for CMMC assessments.
Upload evidence. Athena drafts the SAR, POA&M, SPRS score, eMASS JSON, and OSCAL package — every finding mapped to an assessment objective, every artifact hashed for defense.
Other GRCs stop at contractor readiness. Athena owns the assessor-facing submission layer — SAR drafting, eMASS packaging, OSCAL output, and cryptographic provenance — that C3PAOs, DIBCAC, and program offices actually open on engagement day.
Built to the rule
- 32 CFR Part 170 — the CMMC Program rule, finalized by DoD in October 2024. CMMC requirements now appear in DoD solicitations.
- 110 controls from NIST SP 800-171 Rev. 2.
- 320 assessment objectives from NIST SP 800-171A.
- CMMC Level 1 (FCI) and Level 2 (CUI) scopes covered.
What Athena produces
SAR · POA&M · SPRS submission · eMASS-ready JSON · OSCAL package · evidence binder with SHA-256 hashes · signed chain-of-custody manifest.
Explore Athena
Authored & maintained by Athena Consulting Group — CMMC Level 2 practitioners aligned to 32 CFR Part 170, NIST SP 800-171 Rev. 2, and NIST SP 800-171A.
This page requires JavaScript for the interactive experience.