CMMC Scoreboard gives you a clear, interactive view of your CMMC Level 2 readiness. Score your organization against all 110 NIST SP 800-171 controls, track progress across 320 assessment objectives, and understand exactly what’s required — in plain English.
Every objective is classified as POLICY or CONFIG so you know whether you need a document or a system setting. Built-in Microsoft GCC High shared responsibility mapping shows what your M365 license already covers and what’s still on you.
DoD Organization-Defined Parameters are baked in so you’re not guessing at the minimums. Whether you’re preparing for a C3PAO assessment or managing ongoing compliance, Scoreboard turns a complex framework into something your whole team can follow.
The official FAR clause lists 15 safeguards, but CMMC documentation often references 17 practices. Here is why:
CMMC inherited the DoD’s earlier mapping from the DFARS 252.204-21 “Basic Safeguarding” table, where two of the FAR requirements were split into multiple CMMC practice IDs during modeling. They are not additional requirements—just a structural carryover from the original DoD-to-NIST mapping exercise.