Free tool · Scope preparation

CMMC scoping tool

Define your proposed boundary before hiring an assessment provider. Start with a Scope Snapshot, then identify assets, document separation and take a worksheet into your scoping discussion.

Self-reported preparation only — not a verified boundary, SPRS score or certification decision. Your contract determines the required CMMC level and assessment type.

Scope Snapshot

CAGE code (optional)

Assessment enclave

Target assessment date (optional)

Does the enclave process, store or transmit CUI?

Does an ESP / MSP support the proposed assessment scope?

Include providers that handle CUI or supply security functions. A provider or cloud product name alone does not establish authorization or satisfy a requirement.

Answers stay only in this open page and are lost when it reloads. Downloaded worksheets contain your entries. Do not enter CUI, credentials, system addresses or sensitive technical details. Privacy policy

Scoping references

DoD CMMC Level 1 and Level 2 Scoping Guides · 32 CFR 170.19 — assessment scope

Evidence checklists & templates Practical scoping guide Discuss your proposed scope