Collection: CMMC and NIST 800-171 Templates

CMMC (Cybersecurity Maturity Model Certification) is the US Department of Defense program that checks whether contractors protect Federal Contract Information and Controlled Unclassified Information (CUI), using the 15 FAR 52.204-21 safeguards for Level 1 and the 110 NIST SP 800-171 requirements for Level 2.

These editable Excel and Word templates are for small and mid-sized defense suppliers and the MSPs who support them. Start with the free CMMC Level 1 self-assessment checklist. If you handle CUI, begin with the Level 2 assessment workbook and SPRS calculator, get the Starter Bundle with the SSP and POA&M, or the complete Level 2 Compliance Toolkit.

New to CMMC? Read our CMMC guide.