CMMC Assessment Levels
Three pieces on 32 CFR 170.16 to 170.18: the Level 2 self-assessment, Level 2 certification by a C3PAO, and Level 3 assessment by DIBCAC.
Three pieces in this topic
Level 2 self-assessment and conditional status
What the self-assessment requires, what goes into SPRS, scoring, conditional status and closeout, DIBCAC override, and affirmation.
02Level 2 certification by a C3PAO
The third-party route, how results are reported, the re-evaluation window, conditional and final status, evidence, and service providers.
03Level 3 assessment by DIBCAC
Level 2 first, the three-year cycle, requesting and conducting the assessment, limited checks, conditional status, and appeals.
Key terms in this topic
Level 2 (Self)SPRSPOA&MCloseout assessmentAffirming officialC3PAOeMASSAssessment Findings ReportRe-evaluation windowHashed artifactsLevel 3 (DIBCAC)Level 2 prerequisiteLimited checksBody of evidenceTwenty-one day appeal
Other topics in controlling what transfers
- Technology Transfer and Export Control 5 pieces
- End Use Monitoring 5 pieces
- Excess Defense Articles 3 pieces
- Offsets 3 pieces
- Sensitive Systems and Export Compliance 3 pieces
- Classifying Defense Articles 3 pieces
- Commercial Export Licenses 3 pieces
- Defense Services Agreements 3 pieces
- Licensing Exemptions 3 pieces
- Brokering Controls 3 pieces
- Violations and Penalties 4 pieces
- Registration and Reporting 2 pieces
- Assistance Program Controls 2 pieces
- Munitions List: Weapons 6 pieces
- Munitions List: Platforms 4 pieces
- Munitions List: Electronics 5 pieces
- Munitions List: Training and Protection 3 pieces
- Release Gates for Sensitive Systems 2 pieces
- Country Policy and the Treaties 5 pieces
- Licenses From Application to Revocation 5 pieces
- ITAR Definitions and Technical Data 5 pieces
- Terrorism and Missile Controls 4 pieces
- Chemical, Biological and Nuclear Sanctions 3 pieces
- CMMC Program Basics 3 pieces
- CMMC Assessment Ecosystem 3 pieces
- Controlled Unclassified Information 3 pieces
- DFARS Cyber Safeguarding 3 pieces
- 600 Series Framework 3 pieces
- Licensing 600 Series Items 3 pieces
- Guns, Vehicles and Vessels 3 pieces
- Aircraft, Engines and Electronics 3 pieces
- Protective, Training and Other Items 3 pieces