CMMC Level 2 Self-Assessment Record

Answer a structured set of questions about your own environment. DefendR measures where you stand against all 110 NIST SP 800-171 Revision 2 requirements, computes your score under the DoD scoring methodology, and gives you a readiness map: what to address, what can go on a Plan of Action and Milestones, and what must be resolved before a Level 2 assessment. You also get a verifiable record you can share with a prime or a broker by link.

• The documented basis for your own Level 2 self-assessment and annual affirmation, built from your answers. Not a certification, not a third-party assessment, and not a statement that you are compliant; the answers and the affirmation remain yours.
• Your gaps are the deliverable. Most organizations running a Level 2 self-assessment have gaps; the point is to see them clearly.
• Readiness is a cycle, not a one-time check. Under Phase 1, a Level 2 organization self-assesses every three years and affirms annually in SPRS; the status lapses if the annual affirmation is missed. Third-party assessments are suspended pending the Department's review. The requirements themselves have not changed, and the diagnostic is built to be re-run as your environment or the rules change.