Step 1 of 3: Package identity
CMMC 2.0
Phase 4 · Attestation & reportingCompilation and cryptographic sealing of official SPRS / eMASS submission packages.
Basis: Submission
/cmmc-workflow/submission-packageDoD Cybersecurity Maturity Model Certification (CMMC 2.0 / NIST SP 800-171)
3 steps, completed in order. Each step is validated against the schema before the next unlocks.
Step 1 of 3
Complete the Package identity fields. Each value is validated against the schema before the next step unlocks.
Entity (required)
entityIdEnter entity.
Package type (required)
packageTypeEnter package type.
Format (required)
formatEnter format.
Step 2 of 3
No manual input is captured here: this step is completed from the preceding sections or by the platform.
No manual inputs in this step.
Step 3 of 3
Complete the Release review fields. Each value is validated against the schema before the next step unlocks.
Withdrawal or supersession rationaleoptional
reasonEnter withdrawal or supersession rationale.
Replacement packageoptional
supersededByEnter replacement package.
Continue with the next guide in this framework's table of contents.
Automated NIST SSP compilation, 180-day POAM window enforcement, and SPRS score calculation.
Read guide Phase 4 · Attestation & reportingHuman-governed remediation planning, automated fix playbooks, and 180-day POAM resolution tracking.
Read guide Phase 4 · Attestation & reportingBoard-ready defensible compliance reporting, audit trail aggregation, and analytics packs.
Read guide