Site map
Every public page on auditor-athena.com, grouped by what you are trying to do. There are 283 of them. Signed-in workspace pages are not listed here.
Machine-readable versions: sitemap.xml and the Atom feed.
Free CMMC tools
Run these in your browser. Nothing is uploaded and no account is needed.
Guidance and articles
Reviewed CMMC and NIST SP 800-171 explanations with primary sources.
- Blog
- Common CMMC assessment findings and why they happen
- CMMC compliance software: 7 questions to ask before you buy
- What a CMMC readiness assessment should actually tell you
- Configuring Google Workspace for CMMC Level 2
- How to calculate your SPRS score
- How to prepare for a C3PAO assessment
- CMMC C3PAO: What a Third-Party Assessment Organization Does
- CMMC Consulting Services
- CMMC Compliance Checklist: Level 1 and Level 2
- CMMC Enclaves Explained
- CMMC Level 3 Requirements
- CMMC Levels Explained
- CMMC System Security Plan (SSP) Template
- CUI Basic vs CUI Specified
- DFARS Cybersecurity Compliance
- How to Get CMMC Certified: Steps, Timeline and Cost
- What Is NIST SP 800-171? Requirements for Protecting CUI
- NIST SP 800-53 vs NIST SP 800-171
- CMMC vs ISO 27001
- What Is CMMC? CMMC Compliance and Certification Explained
- Who Needs CMMC Certification?
Control evidence guides
What an assessor examines, interviews and tests, practice by practice.
- CMMC controls
- Ac l2 3 1 1 access control evidence
- Ac l2 3 1 17 wireless protection evidence
- Ac l2 3 1 18 mobile device control evidence
- Ac l2 3 1 2 least privilege evidence
- Ac l2 3 1 20 external connections evidence
- Ac l2 3 1 21 portable storage evidence
- Ac l2 3 1 22 publicly accessible content evidence
- Ac l2 3 1 3 CUI flow control evidence
- Ac l2 3 1 4 separation of duties evidence
- At l2 3 2 2 role based training evidence
- Au l2 3 3 1 audit logging evidence
- Ca l2 3 12 1 security assessment evidence
- Ca l2 3 12 2 POAM evidence
- Ca l2 3 12 4 SSP evidence
- Cm l2 3 4 1 baseline configuration evidence
- Cm l2 3 4 2 config enforcement evidence
- Cm l2 3 4 4 security impact analysis evidence
- Ia l2 3 5 1 identification evidence
- Ia l2 3 5 2 authentication evidence
- Ia l2 3 5 3 mfa evidence
- Ia l2 3 5 3 mfa evidence gcc high
- Ia l2 3 5 4 replay resistant auth evidence
- Ir l2 3 6 1 incident handling evidence
- Ir l2 3 6 2 incident reporting evidence
- Ma l2 3 7 5 nonlocal maintenance evidence
- Mp l2 3 8 3 media sanitization evidence
- Mp l2 3 8 7 removable media evidence
- Pe l2 3 10 2 facility monitoring evidence
- Ps l2 3 9 1 personnel screening evidence
- Ps l2 3 9 2 personnel actions evidence
- Ra l2 3 11 2 vulnerability scanning evidence
- Sc l2 3 13 1 boundary protection evidence
- Sc l2 3 13 11 fips encryption evidence
- Sc l2 3 13 2 security architecture evidence
- Sc l2 3 13 5 subnetwork separation evidence
- Sc l2 3 13 8 transmission encryption evidence
- Si l2 3 14 1 flaw remediation evidence
- Si l2 3 14 2 malicious code evidence
- Si l2 3 14 6 monitoring evidence
CMMC topics
Scoping, SPRS, evidence, SSP, POA&M and assessment preparation.
- CMMC assessment pricing
- CMMC compliance workflow automation
- CMMC cost and timeline
- CMMC coverage status
- CMMC evidence collection
- CMMC Evidence Library: Checklists and Templates for All 14 Domains
- CMMC FAQ: Levels, CUI, POA&M and SSP Questions Answered
- CMMC for cloud native startups
- CMMC for msps
- CMMC level 1 vs level 2
- CMMC level 2 requirements
- CMMC questions
- CMMC roadmap
- CMMC RPO vs RP: What Registered Providers and Practitioners Do
- CMMC scoping tool
- CMMC News and Status 2026: Phase 2 Suspended, What Still Applies
- Brilliant at the Basics: Practical CMMC Scoping Guide
- Level 1
- B 1 i
- B 1 ii
- B 1 iii
- B 1 iv
- B 1 ix
- B 1 v
- B 1 vi
- B 1 vii
- B 1 viii
- B 1 x
- B 1 xi
- B 1 xii
- B 1 xiii
- B 1 xiv
- B 1 xv
- Level 2
- NIST 800 171 vs CMMC
- 3 1 1
- 3 1 10
- 3 1 11
- 3 1 12
- 3 1 13
- 3 1 14
- 3 1 15
- 3 1 16
- 3 1 17
- 3 1 18
- 3 1 19
- 3 1 2
- 3 1 20
- 3 1 21
- 3 1 22
- 3 1 3
- 3 1 4
- 3 1 5
- 3 1 6
- 3 1 7
- 3 1 8
- 3 1 9
- 3 10 1
- 3 10 2
- 3 10 3
- 3 10 4
- 3 10 5
- 3 10 6
- 3 11 1
- 3 11 2
- 3 11 3
- 3 12 1
- 3 12 2
- 3 12 3
- 3 12 4
- 3 13 1
- 3 13 10
- 3 13 11
- 3 13 12
- 3 13 13
- 3 13 14
- 3 13 15
- 3 13 16
- 3 13 2
- 3 13 3
- 3 13 4
- 3 13 5
- 3 13 6
- 3 13 7
- 3 13 8
- 3 13 9
- 3 14 1
- 3 14 2
- 3 14 3
- 3 14 4
- 3 14 5
- 3 14 6
- 3 14 7
- 3 2 1
- 3 2 2
- 3 2 3
- 3 3 1
- 3 3 2
- 3 3 3
- 3 3 4
- 3 3 5
- 3 3 6
- 3 3 7
- 3 3 8
- 3 3 9
- 3 4 1
- 3 4 2
- 3 4 3
- 3 4 4
- 3 4 5
- 3 4 6
- 3 4 7
- 3 4 8
- 3 4 9
- 3 5 1
- 3 5 10
- 3 5 11
- 3 5 2
- 3 5 3
- 3 5 4
- 3 5 5
- 3 5 6
- 3 5 7
- 3 5 8
- 3 5 9
- 3 6 1
- 3 6 2
- 3 6 3
- 3 7 1
- 3 7 2
- 3 7 3
- 3 7 4
- 3 7 5
- 3 7 6
- 3 8 1
- 3 8 2
- 3 8 3
- 3 8 4
- 3 8 5
- 3 8 6
- 3 8 7
- 3 8 8
- 3 8 9
- 3 9 1
- 3 9 2
- NIST 800 171 rev 3
- NIST CSF 2.0 and Purview: Profiles, Scores and CMMC
Who it is for
Primes, subcontractors, small businesses, MSPs, assessors and program offices.
Platform
What Athena does across assessment, evidence, exports and assessor preparation.
Everything else
- Home
- Affirming official shield
- Assessment pack
- Assessor export bundle
- Athena learning
- Athena one pager
- Aws marketplace
- C3PAO assessment prep
- Case studies
- Closed loop
- Conditional cert lifeline
- CUI boundary
- CUI marking guide
- Cyber insurance premium reducer
- Deliverables
- DFARS 252.204-7012 Explained: Requirements for Contractors
- DFARS 7012 vs 7021
- Dibcac mock assessor
- Emass submission
- Evidence binder
- Evidence pack
- FAR 52.204-21: Basic Safeguarding of Covered Contractor Information Systems
- FEDRAMP CUI
- FEDRAMP vs CMMC
- Free CMMC compliance tool
- ISO 27001 to CMMC mapping
- Itar vs CUI
- Joint venture CMMC
- Microsoft Purview CMMC FAQ: Setup, Score Mapping, GCC High
- MSP portfolio
- Oscal for CMMC
- Prime bid defender
- Privacy policy
- Refund policy
- Request assessment
- Revenue at risk
- Samples
- See athena think
- Service level agreement
- Shared responsibility matrix CMMC
- Site map
- SSP automation
- Subcontractor flowdown auditor
- Support policy
- System Security Plan (SSP): Definition, Example and Template
- Terms of service
- Watch
- What Is a POA&M? Plan of Action and Milestones Explained
- What Is CUI? Controlled Unclassified Information Explained