Free tool

CMMC Coverage Status: Requirements Covered, Gaps and Your Roadmap

See your self-reported coverage across the 15 Level 1 and 110 Level 2 requirements, the gaps that remain, and the order to fix them in.

Level 1 (FAR 52.204-21)

0/15

15 gaps

Update Level 1 answers

Level 2 (NIST SP 800-171 Rev. 2)

0/110

0 met · 0 N/A · 0 partial · 0 not met · 110 unanswered

Update Level 2 answers

Your roadmap

  1. Step 1: Close Level 1 gaps (15)

    Level 1 is assessed annually by self-assessment and does not allow a POA&M.

  2. Step 2: Answer the Level 2 requirements you haven't reviewed (110)

    Unanswered requirements are unknown, not met.

Self-reported readiness from answers saved in this browser only. Nothing is sent or stored on our servers. This is not an SPRS score, an evidence-verified result, or a certification. Privacy policy

How the roadmap is ordered

Level 1 gaps come first because Level 1 does not allow a POA&M. Next are Level 2 gaps that can never be on a POA&M (3.1.20, 3.1.22, 3.12.4, 3.10.3, 3.10.4, 3.10.5). Then other Level 2 gaps, which may be POA&M-eligible only with a score of at least 88 under 32 CFR 170.21. Last are requirements you haven't answered yet.

Where the answers come from

The tool reads the answers you gave in the free CMMC self-assessment on this device. Change an answer there and this page updates.

Further reading

Related Athena pages and authoritative external references.

Ready to act on this?

Run the free Quick Score, then walk through the Assessment Pack.