CMMC Readiness Self-Audit (Free Interactive Tool)

CMMC Readiness Self-Audit

If your organization handles Federal Contract Information (FCI) or Controlled Unclassified Information (CUI) as a Department of Defense contractor or subcontractor, CMMC compliance is becoming a condition of doing business. This self-audit walks through the core NIST SP 800-171 practice families to help you see where your current controls stand and where gaps may put your certification or contract eligibility at risk. Answer honestly based on what is actually in place today, not what is planned, and you'll get a scored readiness snapshot at the end.

~9 minutes 5 sections 25 questions

Frequently Asked Questions

Does this self-audit replace a formal C3PAO assessment?

No. This tool is a self-assessment to help you gauge readiness and prioritize gaps. Formal CMMC Level 2 certification requires an assessment by an accredited third-party assessment organization (C3PAO). Think of this as preparation, not certification.

What's the difference between CMMC Level 1 and Level 2?

CMMC Level 1 applies to organizations that only handle Federal Contract Information (FCI) and involves a smaller set of basic safeguarding practices with annual self-assessment. CMMC Level 2 applies to organizations that handle CUI and aligns with the 110 practices in NIST SP 800-171, typically requiring a third-party assessment.

What happens after I get my results?

You'll receive a scored breakdown by domain showing where your organization is strong and where gaps exist, which you can download for your own records or to share internally. From there, Mytek Pros can help you build a remediation plan and close identified gaps ahead of a formal assessment.

How is my SPRS score related to this self-audit?

Your SPRS (Supplier Performance Risk System) score is a numeric self-assessment score DoD contractors submit based on NIST SP 800-171 compliance. This tool covers the same practice families and can help you identify which areas are likely dragging that score down before you submit or update it.