A CMMC Level 2 self-assessment is not just a checklist.

Your organization must define the right scope, evaluate every applicable assessment objective, collect sufficient evidence, calculate an accurate score, and support executive affirmation. This workshop gives your team a repeatable, assessor-informed method for doing it correctly.

WHAT YOU WILL LEARN

  • Define the Level 2 assessment boundary and trace CUI across systems, users, facilities, and providers.

  • Categorize CUI assets, security protection assets, contractor risk managed assets, specialized assets, and out-of-scope assets.

  • Build an assessment plan for all 110 Level 2 requirements and their applicable assessment objectives.

  • Select and perform appropriate examine, interview, and test activities.

  • Determine whether evidence is relevant, current, complete, and sufficient.

  • Record MET and NOT MET findings, calculate the score, and evaluate POA&M eligibility.

  • Prepare results for SPRS submission, affirmation, and continuing compliance.

Course curriculum

    1. Welcome to Module 1

    2. What the Assessment Must Accomplish

    3. From Contract Obligation to CMMC

    4. Source Hierarchy Check

    5. What Level 2 Evaluates

    6. Evidence Decision

    7. Define the Environment Being Assessed

    8. Name Your Proposed Environment

    9. Self-Assessment Responsibilities

    10. Responsibility Scenario

    11. Continuing Compliance and Change

    12. Change-Impact Decision

    13. Precision Systems Engineering Scenario

    14. Readiness Checklist

    15. Download and Complete Your Readiness Checklist

    16. Module 1 Graded Quiz

    17. Summary and Module 2 Preparation

    1. Welcome to Module 2

    2. Module Resources

    3. Begin with CUI

    4. Knowledge Check: Follow the Information

    5. ACTIVITY: Map One Representative CUI Flow

    6. Categorize Assets Correctly

    7. Knowledge Check: Asset Category

    8. ACTIVITY: Categorize One Organizational Asset

    9. People, Technology, Facilities, and Providers

    10. Knowledge Check: Provider Evidence

    11. ACTIVITY: Build an External Provider Inventory

    12. Document and Validate the Boundary

    13. Boundary Validation Check

    14. Precision Systems Engineering Scenario

    15. Scope and Asset Categorization Activity

    16. Scenario Model Answer

    17. Module 2 Deliverable and Its Use

    18. ACITIVTY: Define Your Proposed Assessment Scope

    19. Module 2 Graded Quiz

    20. Module Summary and Completion Checklist

    21. Readiness Warning

    22. Prepare for Module 3

    1. Welcome to Module 3

    2. Assessment Plan and Method Selection Workbook

    3. From Scope to Assessment Plan

    4. Scope-to-Plan Check

    5. Build the Assessment Team

    6. Role Assignment Check

    7. Build the Objective-Level Assessment Workbook

    8. Workbook Planning Check

    9. Select Assessment Methods

    10. Assessment Method Check

    11. Design Targeted Evidence Requests

    12. Evidence Request Check

    13. Evaluate Evidence and Readiness

    14. Evidence Quality Check

    15. Precision Systems Engineering Scenario

    16. Downloadable Scenario Worksheet

    17. Model Answer

    18. Build Your Organization’s Initial Plan

    19. Activity: Build Your Organization’s Initial Plan

    20. Module 3 Graded Quiz

    21. Module Summary and Module 4 Preparation

    1. Welcome to Module 4 — Performing the Assessment

    2. Module 4 Introduction — From Plan to Assessment Execution

    3. Lesson 4.1 — Assess Objectives, Not Just Requirements

    4. Objective-Level Assessment Check

    5. Lesson 4.2 — Examine Evidence

    6. Evidence Quality Check

    7. Lesson 4.3 — Interview Personnel

    8. Interview Decision Check

    9. Lesson 4.4 — Test Implementations

    10. Test Method Check

    11. Lesson 4.5 — Correlate Evidence

    12. Evidence Correlation Check

    13. Lesson 4.6 — Select Representative Samples

    14. Sampling Check

    15. Lesson 4.7 — Record Defensible Conclusions

    16. Evidence Quality and Conclusion Check

    17. Precision Systems Engineering MFA Scenario

    18. Activity: Precision Systems Engineering MFA Scenario

    19. Precision Systems Engineering MFA Scenario — Model Answer

    20. Module 4 Key Takeaways

    21. Download: Module 4 Evidence Inventory and Evidence-to-Assessment-Objective Map

    22. Activity: Assess One Requirement in Your Organization

    23. Module 4 Graded Quiz — Performing the Assessment

    24. Module Close and Application

    25. Module 4 Summary and Completion Checklist

    1. Welcome to Module 5 — Making Findings and Calculating the Score

    2. Lesson 5.1 — Convert Assessment Objectives into Findings

    3. Finding Determination Check

    4. Lesson 5.2 — Document Defensible Findings

    5. Finding Documentation Check

    6. Lesson 5.3 — Calculate the Level 2 Score

    7. Scoring Check

    8. Lesson 5.4 — Determine POA&M Eligibility

    9. POA&M Eligibility Check

    10. Lesson 5.5 — Determine Preliminary Assessment Status

    11. Status Decision Check

    12. Lesson 5.6 — Validate the Assessment Package

    13. Results Validation Check

    14. Activity: Precision Systems Engineering — Module 5 Scenario

    15. Precision Systems Engineering — Scenario Model Answer

    16. Download: Module 5 Completed Assessment Worksheet, Findings Log, and Preliminary Score

    17. Assess and Score Your Organization

    18. Module 5 Graded Quiz

    19. Module 5 Summary and Completion Checklist

    20. Prepare for Module 6 — Finalize, Report, and Affirm

About this course

  • $495.00
  • 138 lessons

THE OUTCOME

Participants leave with a clear methodology, reusable templates, and a stronger ability to scope, assess, score, document, and defend a CMMC Level 2 self-assessment.