ComplyKit ← All generators

🛡️

CMMC 2.0 Level 2 Gap Assessment

42-item gap assessment covering all key NIST 800-171 practice domains — access control, identity, configuration, incident response, system protection, and supply chain. Generate a professional CMMC 2.0 Level 2 readiness report with a prioritized remediation roadmap.

CMMC 2.0 Level 2NIST 800-171DFARS 252.204-7012C3PAO prepDoD contractors

1

Organisation

2

Gap Assessment

Organisation Details

Organisation Name *

Website

Country

Team / Role

Organisation Size

Contractor Role

Assessment Goal

CUI Categories Handled

Technical data / engineering drawingsDoD acquisition / procurement informationExport-controlled (EAR/ITAR) technical dataPersonnel / HR informationFinancial / budget informationSensitive law enforcement informationChemical / biological / nuclear program dataInfrastructure / critical systems dataPrivacy Act dataOther CUI categories

Existing Frameworks / Controls

NIST SP 800-171 Rev 2NIST SP 800-171 Rev 3NIST SP 800-53NIST CSF 2.0ISO/IEC 27001FedRAMP (Moderate or High)DFARS 252.204-7012 (current self-attestation)Existing CMMC Level 1 (15 practices)StateRAMPNone yet

Additional Context (optional)