Free download · CMMC Level 2 scoping kit
CMMC Level 2 scoping & evidence kit
Scope your CMMC Level 2 environment right and know what evidence a C3PAO will expect. This kit maps the 110 NIST SP 800-171 practices, helps you define the CUI boundary, and lists the evidence for each practice — the biggest lever on cost and pass rate.
Practices
110
Basis
NIST 800-171
Format
Excel + PDF
Level
Level 2
Get the cmmc level 2 scoping kit
Enter your work email and we’ll send it straight to your inbox.
What’s included
CUI boundary worksheet
Define where Controlled Unclassified Information lives and flows — scope drives cost and assessment effort.
110-practice evidence list
Every NIST SP 800-171 practice mapped to the objective evidence a C3PAO assessor samples.
SSP & POA&M starters
System Security Plan and Plan of Action & Milestones structures to complete.
Assessment-readiness score
A self-score to see how close you are to a passing assessment.
Who it’s for
- Defense-supply-chain and US-government contractors handling CUI
- Security leads preparing for a C3PAO CMMC Level 2 assessment
- Indian/global suppliers to US primes needing CMMC
Inside the cmmc level 2 scoping kit
- CUI boundary and scoping worksheet
- 110 NIST SP 800-171 practices with evidence
- SSP and POA&M starters
- Assessment-readiness scoring
- Common assessment gaps
Prepared by CyberSigma compliance practice · Reviewed by a NIST 800-171 / CMMC specialist · Last updated July 2026
Want help reaching CMMC Level 2?
We scope your CUI environment, close the 110-practice gaps and prepare you for the C3PAO assessment.