SecuryxAI
Sign inStart free trial
Readiness Assessment

CMMC Level 2 Readiness Assessment

18 questions drawn directly from NIST SP 800-171's own control families and CMMC 2.0's program requirements — with a domain-by-domain readiness score. Not an official CMMC assessment and does not produce an SPRS score.

Free18 questions~6 min9 domainsNo credit card
Results are personalized to your answers — nothing is pre-written.
WHAT YOU RECEIVE
  • An indicative readiness scoreWeighted against CMMC Level 2's own published requirements.
  • A score for each of your domainsAll 9 domains, scored separately — not one blended number.
  • Your specific gaps, explainedWhy each one matters and the action that closes it.
  • A Now / Next / Later roadmapPrioritized by severity, so you know what to do first.
  • A downloadable PDF reportSomething you can circulate internally.
The assessment and your score are free. The full report is unlocked with a business email.

What this assessment covers

18 questions across 9 domains, every one tied to a specific published CMMC Level 2 requirement.

01Program Documentation & Assessment ReadinessThe System Security Plan, POA&M, scoping, and assessment route CMMC 2.0 itself requires, beyond any single 800-171 control.
02Access ControlLimiting system access to authorized users and transactions (NIST SP 800-171 family AC).
03Identification & AuthenticationVerifying the identity of users and devices before granting access (family IA).
04Audit & AccountabilityCreating, protecting, and reviewing system audit logs (family AU).
05Configuration ManagementEstablishing and enforcing secure baseline configurations (family CM).
06Incident ResponseEstablishing an operational capability to handle incidents involving CUI (family IR).
07Media & Physical ProtectionProtecting media and physical access to systems processing CUI (families MP, PE).
08System & Communications ProtectionMonitoring and protecting communications at system boundaries (family SC).
09System & Information IntegrityIdentifying, reporting, and correcting system flaws and malicious code (family SI).

How it works

1Answer 18 questionsAbout 6 minutes. Each question states the requirement it maps to, so you always know what's being asked and why.
2See your score immediatelyYour overall readiness, maturity level, and where your strongest and weakest areas sit — free, on screen, no email required.
3Unlock the full reportAdd a business email to get every domain scored, all findings explained, a prioritized roadmap, and a PDF you can circulate.

This is a self-assessment tool, not an official CMMC assessment. It does not implement the DoD's SPRS scoring methodology and does not produce an SPRS score — only an indicative readiness percentage based on your own answers. A genuine CMMC Level 2 determination requires either a compliant self-assessment submission or a C3PAO (CMMC Third-Party Assessment Organization) certification assessment, depending on your contract requirements. Confirm your specific obligations with your contracting officer or a qualified CMMC assessor.

WANT THE FULL PICTURE FIRST?

CMMC: The Complete Executive Guide

CMMC 2.0's three levels, its direct relationship to NIST SP 800-171, and why the real consequence of non-compliance is contract eligibility, not a fine.

Read Executive Guide

Explore CMMC

Hub overview →