CMMC 2.0 Reference Guide

Updated for NIST SP 800-171 Rev 3

Level 1

Foundational

0 / 17 Compliant
  • 17 Basic Safeguards (FAR 52.204-21)
  • Annual Self-Assessment
Level 2

Advanced

0 / 97 Compliant
  • NIST 800-171 Rev 3 (97 Controls)
  • New Families: PL, SA, SR
  • Triennial 3rd Party Audit
Level 3

Expert

0 / 132 Compliant
  • Includes all L2 + NIST 800-172 (35 Controls)
  • Government-led Audit

Foundational (Level 1)

Advanced (Level 2)

Expert (Level 3)

Controls Breakdown

Foundational (Level 1)
Advanced (Level 2)
Expert (Level 3)
Family & Progress Count Controls (Click to Toggle Compliance)