Step 1 of 2: Identity
CMMC 2.0
Phase 1 · Scoping & architectureGuided customer readiness journey through scoping, assessment, POAM remediation, and affirmation.
Basis: DoD CMMC Assessment Guide Level 2
/cmmc/readinessDoD Cybersecurity Maturity Model Certification (CMMC 2.0 / NIST SP 800-171)
2 steps, completed in order. Each step is validated against the schema before the next unlocks.
Step 1 of 2
Complete the Identity fields. Each value is validated against the schema before the next step unlocks.
Domain entity ID (required)
entityIdThe organisation or system this record is about — lowercase with dashes, e.g. acme-corp-hq. Pick one you have used before, or type a new id to create it.
Step 2 of 2
Complete the Posture fields. Each value is validated against the schema before the next step unlocks.
Assessed at (required)
readinessLevelAltitude of this verdict — a scope, a family, or one control.
Why this verdictoptional
verdictRationaleThe engine states its reasons; record any judgement it could not see.
Continue with the next guide in this framework's table of contents.
CUI boundary definition, asset categorization (CUI, SPA, SMA, CRD, Out-of-Scope), and scope graph locking.
Read guide Phase 1 · Scoping & architectureSelf-protecting infrastructure compliance, database boundary isolation, and tenant security health.
Read guide Phase 1 · Scoping & architectureArchitecture and network topology conformance analysis, boundary isolation tests, and DR readiness.
Read guide