DeshCyber Logo

Step 1 of 3: Identity

CMMC 2.0

Phase 4 · Attestation & reporting Core
Prev16 / 23Next

System Security Plan (SSP) & POA&M Package

Producing the SSP and POA&M the C3PAO assessment is scored against.

Automated NIST SSP compilation, 180-day POAM window enforcement, and SPRS score calculation.

Basis: NIST SP 800-171 Requirement 3.12.4

3 steps11 fields~12 minUpdated 2026-10-08Specification
Record status
  1. ssp draftingstart
  2. ssp review
  3. ssp approved
  4. poam active
  5. poam closedend

At a glance

Before you start
  • Open it: CMMC › Package /cmmc-workflow/package
  • Role: analystmanagersupervisoradmin
  • Finish with: Save Draft · Create package
Regulatory basis

DoD Cybersecurity Maturity Model Certification (CMMC 2.0 / NIST SP 800-171)

What happens next
  1. Approve SSP officeradmin
  2. Close POAM officeradmin

Step-by-step procedure

3 steps, completed in order. Each step is validated against the schema before the next unlocks.

Step 1 of 3

Identity

ScreenCMMC › Packagestep 1

Complete the Identity fields. Each value is validated against the schema before the next step unlocks.

required“optional” — may be left empty
  • Domain entity ID (required)

    entityId

    The organisation or system this record is about — lowercase with dashes, e.g. acme-corp-hq. Pick one you have used before, or type a new id to create it.

  • Target CMMC Leveloptional

    targetLevel

    Enter target cmmc level.

  • Conditional status dateoptional

    conditionalStatusAt

    Enter conditional status date.

1 / 3

Next in CMMC 2.0

Continue with the next guide in this framework's table of contents.

Remediation Action Plan & Milestone Tracking
All CMMC 2.0 guides23
All guides