Step 1 of 3
Control
No manual input is captured here: this step is completed from the preceding sections or by the platform.
No manual inputs in this step.
1 / 3
CMMC 2.0
Phase 2 · Technical controlsCMMC NIST SP 800-171A Objective Control Assessment
Granular assessment objective evaluation, weighted scoring, and evidence verification.
Basis: Assessment
Record status
- not assessedstart
- self assessed
- non compliant
- exception acceptedend
At a glance
- Before you start
- Open it: CMMC › CMMC NIST SP 800-171A Objective Control Assessment
/cmmc/control-assessment - Role: analystmanagersupervisoradminofficer
- Finish with: Save Draft · Self-assess
- Open it: CMMC › CMMC NIST SP 800-171A Objective Control Assessment
- Regulatory basis
DoD Cybersecurity Maturity Model Certification (CMMC 2.0 / NIST SP 800-171)
- What happens next
- Self-assess analystmanagersupervisoradmin
- Independent assess officermanageradmin
- Mark compliant analystmanagersupervisoradmin
- Mark non-compliant analystmanagersupervisoradmin
- Accept exception officermanageradmin
- Approve justified non-applicability analystmanagersupervisoradmin
Step-by-step procedure
3 steps, completed in order. Each step is validated against the schema before the next unlocks.
Step 2 of 3
Evidence
Complete the Evidence fields. Each value is validated against the schema before the next step unlocks.
“optional” — may be left empty
Linked evidence IDoptional
evidenceIdEnter linked evidence id.
2 / 3
Step 3 of 3
Assessment
Complete the Assessment fields. Each value is validated against the schema before the next step unlocks.
“optional” — may be left empty
Independent assessor approvedoptional
independentApprovedEnter independent assessor approved.
Non-applicability justificationoptional
notApplicableJustificationExplain why this practice is not applicable to the defined assessment boundary.e.g.
Wireless networking controls are not applicable because all facilities use strictly wired networking.Exception rationale (POA&M / accepted risk)optional
exceptionRationaleMilestone date and compensating safeguards for POA&M tracking.e.g.
Remediation planned by Q3 2026. Interim safeguard: isolated network segment.Assessor findingsoptional
findingsEnter assessor findings.
3 / 3Procedure complete
Next in CMMC 2.0
Continue with the next guide in this framework's table of contents.
Phase 2 · Technical controls
CMMC Level 2 (Advanced) 110 Security Controls
110 security requirements across 14 control families, SPRS scoring, and C3PAO review.
Read guide Phase 2 · Technical controlsCMMC Level 3 (Expert) Selected Controls Implementation
24 advanced protection practices against Advanced Persistent Threats (APTs) and DIBCAC review.
Read guide Phase 2 · Technical controlsAssessment Objective Practice Verification Packets
Evidence packets indexed to NIST 800-171A assessment objectives with assessor review determinations.
Read guide