CMMC Level 2 / NIST 800-171 Assessment Workbook with SPRS Calculator

Assess all 110 NIST SP 800-171 requirements and 320 assessment objectives, and calculate your SPRS score, in one Excel workbook. Tested by filling every objective: all MET gives 110 and all NOT MET gives the methodology minimum of -203.

What you get

1. Requirements sheet (Excel): all 110 requirements with verbatim NIST text, plain-English explanations, typical evidence, DoD point values and POA&M eligibility.
2. Objectives sheet (Excel): all 320 assessment objectives from SP 800-171A, quoted verbatim, with MET / NOT MET / N/A dropdowns and evidence notes.
3. Assessment Methods sheet (Excel): what an assessor would examine, who they would interview and what they would test, for each requirement.
4. SPRS Score calculator (Excel): DoD Assessment Methodology scoring with partial credit for 3.5.3 and 3.13.11, a worst-case score for unassessed items and an SSP check.
5. Conditional Status check and Dashboard (Excel): whether you meet the 88-point threshold with only eligible items open, and results by family.
6. Start Here guide (PDF): steps, what good looks like and common mistakes.

Also included in the CMMC Level 2 Starter Bundle and the CMMC Level 2 Compliance Toolkit.

How to use it

1. Define your scope (enclave or whole company) and have your SSP to hand (1 to 2 hours).
2. Work through the objectives family by family, recording evidence for every MET (2 to 4 days over 2 to 3 weeks).
3. Answer the two partial-credit questions on the SPRS sheet.
4. Review the score, Conditional status and dashboard, and list blocking items.
5. Put NOT MET items on your POA&M, update the SSP, then enter the score in SPRS.

Who it is for

Defense suppliers that handle CUI and need a NIST SP 800-171 self-assessment and SPRS score, and the MSPs who run assessments for them. CUI is sensitive but unclassified government information, such as export-controlled drawings, that your contract requires you to protect.

Good to know

• Instant download. Editable Excel (.xlsx) plus a PDF guide. Works in Excel 2016 or later, Microsoft 365 and LibreOffice; no macros.
• Licensed for use within one organization.
• NIST SP 800-171/171A and FAR requirement text is quoted verbatim (public domain). Check your contract and the current rules for what applies to you.
• These templates help you prepare and document an honest self-assessment. They do not guarantee a particular SPRS score, a passing assessment or contract eligibility.
• 5-day fit guarantee: if it does not fit your system, contact us within 5 days of purchase.