CMMC Level 2 / NIST 800-171 Kit: SSP Template, SPRS Score Calculator, POA&M, 14 Policies

Not eligible for NQT documentation review. For defense suppliers handling CUI: practical gap tracking and documentation templates to help you prepare for a CMMC Level 2 assessment. Templates, not legal advice; not a CMMC assessment or certification.

CMMC Level 2 / NIST 800-171 Kit: SSP Template, SPRS Score Calculator, POA&M, 14 Policies

SSP template, a 110-requirement self-assessment with live SPRS score, POA&M tracker, 14 policy templates and an incident response plan for small defense contractors.

What's inside:

- 00_Start_Here_README.pdf

- 01_System_Security_Plan_SSP_Template.docx

- 02_SPRS_Self-Assessment_and_POAM_Workbook.xlsx

- 03_Policy_Templates_14_Families.docx

- 04_Incident_Response_Plan_and_DFARS_72hr_Reporting.docx

Written by Matt Norman: 15 years as a U.S. Navy aviation structural mechanic, then 3 years at SpaceX as a Falcon 9 quality inspector and QA supervisor, with hands-on experience working under ITAR and DoD compliance requirements. Norman Quality Tools is Veteran-Owned & Operated.

License: one company, all sites. Word/Excel 2016+, Microsoft 365, LibreOffice. No macros.

Templates, not legal advice. Not a CMMC assessment or certification.

Norman Quality Tools is not affiliated with or endorsed by the U.S. Department of Defense or NIST, or any other standards body, government agency or company named in this description. Standards are cited by number only; buy the official standard from its publisher.

Not affiliated with or endorsed by SpaceX or any other current or former employer of the author.

More kits at normanqualitytools.com

© 2026 Norman Quality Tools. All rights reserved.