Start here
New to CMMC? This is the way through these free guides and tools, where to find things, and who to ask for help.
This is an independent guide. Movegistics is not affiliated with or endorsed by Project Spectrum or the Department of War. The information provided in these guides is for general information purposes only. Links to official sources are provided where available. See the Disclaimer for more.
Facts last checked: .
Your path to a Level 2 self-assessment
Learn what Level 2 asks
Read the Level 2 guide: all 110 requirements in movers' terms. For quick answers, see the FAQ.
Work out what is in scope
Which systems, phones, papers and places the requirements apply to. See what's in scope at a moving company.
Find your gaps
Take Project Spectrum's free Level 2 self-assessment. See your first hour on Project Spectrum.
Fix and track
Fix the 5-point gaps first: they cost the most, and none of them can wait on a plan of action. Each family page shows how many it has. Track every gap, owner and date in the free workbook. Adapt and approve the policies pack, train your crews with the training kit, and check your providers and agents with the vendor and agent kit.
Write your System Security Plan
Requirement 3.12.4: without it, the assessment cannot be completed. Start from the free SSP template.
Assess, post and affirm
Do your self-assessment against the official assessment objectives in NIST SP 800-171A (the DoD Level 2 Assessment Guide lists them), and keep the evidence. Then post it in SPRS and have your Affirming Official affirm it.
Where do I find…
- What a requirement means
- The Level 2 guide, one page per family, or look up a requirement by number
- Whether something is in scope
- What's in scope at a moving company
- Points, scores and plans of action
- How Level 2 works and the FAQ
- Quick answers
- The FAQ: Level 2 questions movers ask
- Downloads
- Free tools: the workbook, the SSP template, the policies pack, the crew training kit and the vendor and agent kit, each with a download button
- A worked example
- How a 12-person mover gets to Level 2 (fictional)
- What a term means
- Glossary
- Free government help
- Project Spectrum, and resources by NAICS code
- Everything on this site
- Find anything: A to Z
- Where our facts come from
- How we checked these guides
Help from a person
- Project Spectrum's Cyber Advisors are free. Book a session through the platform or email support@projectspectrum.io.
- Your TSP, if you are an agent or subcontractor: what it needs from you, and by when.
- Your IT company for the technical fixes.
- SPRS and PIEE for posting your score: see where to get help.
- Us, to report something out of date through movegistics.com/contact. We cannot advise on your company's assessment, and please do not send us shipment information.
Sources: Project Spectrum FAQ, Department of War, business.defense.gov/cmmc
Help built into the tools
Every requirement shows its official wording next to our plain-English version. The workbook opens with instructions and has notes on the cells that need care. The SSP template has instructions and an example for every requirement. The policies pack, the training kit and the vendor kit each start with how to use them. Terms are explained in the glossary.