Overview
The CMMC L1 & L2 Self Assessment Tool helps organizations conduct CMMC Level 1 and Level 2 compliance
assessments, track progress, and generate professional reports.
Getting Started
Signing In
- Click "Sign In with Google"
- Authenticate with your Google account
- You'll be directed to the customer dashboard
Managing Customers
Adding Customers
- Click "Add New Customer"
- Fill in details (Name, Contact Info, Participants, Date, Evaluators)
- Click "Save Customer"
Conducting Assessments
Starting an Assessment
- Click "View Assessments" for a customer
- Choose assessment type:
- CMMC L2 - 110 controls (NIST 800-171)
- CMMC L1 - 15 controls (FAR 52.204-21)
Assessment Workspace
- Review each control requirement
- Select status: Met, Not
Met, N/A, or Not
Assessed
- Document findings using the comment template provided
- For CMMC L2: Hover over controls to see assessment objectives
Comment Template
Interview Results:
Document Review Results:
Technology Review Results:
Recommendations/Deficiencies:
Replace template sections with actual assessment findings. Unmodified
templates won't appear in reports.
Viewing Results
Dashboard
- Overall compliance score and metrics
- CMMC L1: Shows compliance status (requires all 15 controls Met)
- CMMC L2: Shows SPRS score (-203 to +110 range)
- Control family breakdown with completion status
Reports
- Detailed Report - Complete assessment with all controls and
comments
- Un-Met Report - Shows only non-Met controls with detailed
guidance
- Click "Download PDF" to export for offline use
Compliance Requirements
CMMC Level 1
- 100% Required: ALL 15 controls must be "Met"
- Self-attestation available only at full compliance
CMMC Level 2 / NIST 800-171
- 110 controls across 14 control families
- SPRS scoring based on DoD assessment methodology
- Higher scores indicate better compliance
Best Practices
- Be Thorough: Take time to properly evaluate each control
- Document Everything: Replace all template text with actual
findings and evidence
- Use Multiple Methods: Combine interviews, document reviews,
and technical testing
- Be Honest: Accurate assessments are more valuable than
inflated scores
Troubleshooting
Q: Changes aren't saving?
A: Check internet
connection and refresh the page
Q: Don't see self-attestation?
A: For CMMC L1, all
15 controls must be "Met"
Q: Blank comment fields in reports?
A: Only modified
comments are shown (this is intentional)
Q: Need to see updates?
A: Press Cmd+Shift+R (Mac) or Ctrl+Shift+R (Windows)
Reference Links
Last Updated: December 11, 2025