110 PRACTICES.
FULL DFARS SCOPE.

IF YOUR CONTRACT
HAS DFARS 7012,
YOU NEED LEVEL 2.

DFARS 252.204-7012 requires safeguarding of Covered Defense Information — and that means full NIST SP 800-171 compliance. All 110 practices. Every CUI-handling domain. Not just the 17 basic practices in Level 1.

If you process, store, or transmit CUI under a DoD contract — and most defense subcontractors do — Level 2 is not optional. Your SPRS score is visible to your prime contractor and the DoD. If it's wrong, you're at risk.

Full Level 2 Assessment

All 110 CMMC 2.0 practices with Yes/Partial/No tracking. Notes, plain-English explanations, and auto-save on every answer.

SPRS Calculator

Your real DoD SPRS score using official methodology weights. Domain breakdown, score band context, and gap prioritization.

SSP Generator

Auto-populate your System Security Plan from your profile and assessment responses. Print-ready with all 7 required sections.

CUI Identifier

Describe your information. Get the CUI category, required marking format, and handling obligations from the National Archives registry.

Remediation Planner

Practice-specific gap wizard with assigned-to, target dates, priority, and status tracking. Exportable as POA&M.

Document Templates

Policy, procedure, and work instruction templates for every practice that requires documentation.