CMMC Level 2 POA&M Tracker for NIST 800-171

A ready-to-use Plan of Action and Milestones tracker for CMMC Level 2, built around the actual POA&M rules in 32 CFR 170.21. It does the eligibility math for you, so you do not put a gap on a POA&M that an assessor will reject.

What is inside (Excel, 5 tabs):

- All 110 NIST 800-171 Rev 2 requirements with DoD point weights (1, 3, 5) and POA&M-eligibility flagged per control

- A POA&M Register to log each deficiency, remediation plan, milestones, owner, and target dates

- A Conditional Status calculator that checks the 80% threshold (88 of 110), counts your open and ineligible items, and runs the 180-day closeout clock

- A Start Here guide and a Reference tab citing the rules and sources

It enforces what the program actually allows: only 1-point requirements are POA&M-eligible, six requirements can never go on a POA&M, the single 3.13.11 FIPS exception, and the 180-day window to close every item before the conditional status expires.

Built for small defense contractors and subcontractors preparing a NIST 800-171 self-assessment or a C3PAO Level 2 assessment who need their POA&M and conditional-status math to hold up. A tool, not legal advice.