CMMC Level 2 preparation

CMMC Level 2 compliance software for small contractors

For every assessment objective, get a suggested policy, a procedure that fits your systems, and clear evidence guidance. Your SSP, POA&M and SPRS score build from the same work.

Start your 14-day free trialNo credit card required
CMMC2Ready DashboardLive Status
CMMC2Ready Real-Time Compliance Dashboard
CMMC2Ready

3.1.1[a] — authorized users are identified.

Family 3.1 / Requirement 3.1.1/ Objective 3.1.1[a]Not Met
Policy

The organization shall maintain current records identifying each authorized user of organizational systems and the user's role.

ProcedureCentralized account or identity record ▾

The account management responsible person shall obtain an export or report of active organizational system accounts at least monthly, verify that each account is associated with a named individual and role, and retain the dated report.

Acceptable evidence

A dated active-account export showing each account identifier, the associated individual's name, account status, and role or group information.

For every objective

Policy, procedure, and evidence for every objective.

Each of the 110 Level 2 requirements is assessed through specific objectives. For each one, CMMC2Ready gives you:

Policy

a suggested policy statement you can adopt or edit.

Procedure

suggested steps for how you actually work, matched to the assets you've added. Where there's more than one common approach, you pick yours.

Evidence

what to collect, with examples of what's acceptable and what falls short.

Do the work once. It shows up everywhere it belongs.

The text you confirm in each objective flows into the right policy and procedure documents. Your business details, assets, and objectives compile into your SSP. Requirements you plan to finish later go to your POA&M, and your SPRS score updates as you go.

Objectives →
DocumentsSSPPOA&MSPRS score
CMMC2ReadyDocuments

Policy & Procedure Documents

Compiled from confirmed policy and procedure statements.

Access control policyAvailable to preview
Procedures addressing account managementAvailable to preview
Audit and accountability policyConfirm contributing objectives
Configuration management policy and proceduresConfirm contributing objectives
CMMC2Ready

Access Control

NIST SP 800-171 · Family 3.12 / 22 Met
IDRequirementObjectives
3.1.1Authorized Access Control0 / 6 Met
3.1.2Transaction & Function Control0 / 2 Met
3.1.3Control CUI Flow0 / 5 Met
3.1.4Separation of Duties0 / 3 Met
3.1.5Least Privilege0 / 4 Met

We guide. You decide what's Met.

CMMC2Ready never marks anything Met for you. You review the guidance, attach your evidence, and mark each objective. When all objectives under a requirement are Met or Not Applicable, the requirement is Met. Mark a requirement as planned, and it goes to your POA&M.

One plan. Everything included. Try it free for 14 days.

$199 a month after trial. Cancel any time.