See where you really stand on CMMC
A free Excel checklist that scopes Level 1 versus Level 2, tracks the NIST 800-171 controls as met, partial, or gap, and gives you a starting SPRS score and POA&M.
A free Excel CMMC readiness checklist for defense contractors. Scope Level 1 or 2, track NIST 800-171 controls, start a POA&M, and estimate your SPRS score.
What you'll get
A practical, ready-to-use resource you fill in with your own numbers and keep. No expiring trial, no strings.
What the CMMC readiness checklist does
CMMC trips up a lot of small defense contractors because the requirements feel enormous and the stakes feel high. The framework points to NIST 800-171, the score lives in SPRS, and somewhere in there you are supposed to have a plan of action. It is a lot to hold in your head, and the first instinct is often to either panic or ignore it.
This checklist gives you a calm place to start. You confirm whether you need Level 1 or Level 2, work down the controls marking each one met, partial, or gap, and the workbook turns that into an estimated SPRS score and the bones of a POA&M. It will not certify you, but it will tell you honestly where you stand.
Scope before you scramble
A clear Level 1 versus Level 2 section so you focus on the controls that actually apply to your contracts, not a wall of requirements you do not need.
An SPRS score you can defend
Mark each control met, partial, or gap and the workbook estimates your SPRS score, so you walk into a conversation with a number instead of a shrug.
A POA&M you can actually start
A plan-of-action-and-milestones starter turns your gaps into a tracked to-do list, which is exactly what an assessor expects to see.
Knows what an MSP can and cannot do
A plain note on what your IT provider can handle for you and what stays your responsibility, plus guidance on subcontractor flow-down.
What is inside the workbook
- A Level 1 versus Level 2 scoping section so you work the right control set
- The NIST 800-171 control checklist, each marked met, partial, or gap
- A POA&M starter that turns your gaps into tracked milestones
- An SPRS score estimator that updates as you fill in the controls
- A plain note on what an MSP can and cannot do for you
- Flow-down guidance for the subcontractors in your supply chain
A self-assessment is a starting point, not a certification
New to CMMC and not sure if it even applies?
Before you score yourself, it helps to know whether you are in scope at all. Our article on what CMMC is and whether you need it explains the levels and the subcontractor flow-down in plain English, and our compliance hub covers CMMC alongside the other rules small businesses face.
How it works
Tell us where to send it
Fill in the short form. Just enough so we know who we're helping and can tailor any follow-up, only if you want it.
Check your inbox
We email your copy right away, and the download is yours to keep. No expiring trial, no login.
Put it to work
Use it on your own, or ask us for a second set of eyes. No pressure either way.
We do not sell your information
You get the file and an email copy for later. That is it. No third-party sharing, ever.
Real local humans built this
Vicinity is a genuinely local IT provider with people in Alaska and Hawaii who support defense and AEC work.
A working tool, not legal advice
The checklist helps you organize your readiness effort. It is a starting point, not a substitute for a certified assessor or counsel.