How the roadmap is ordered
Level 1 gaps come first because Level 1 does not allow a POA&M. Next are Level 2 gaps that can never be on a POA&M (3.1.20, 3.1.22, 3.12.4, 3.10.3, 3.10.4, 3.10.5). Then other Level 2 gaps, which may be POA&M-eligible only with a score of at least 88 under 32 CFR 170.21. Last are requirements you haven't answered yet.
Where the answers come from
The tool reads the answers you gave in the free CMMC self-assessment on this device. Change an answer there and this page updates.