What's inside
All 110 requirements, templated
Every NIST SP 800-171 Rev. 2 control decomposed to its assessment objectives, with implementation-statement scaffolding, ownership fields, and status tracking.
Implementation sequenced
Workflows ordered by the phases of the CMMC Factory Model (scope, architect, implement, evidence), so the program runs in the order assessments are won.
Know where you stand
Structured self-assessment surveys that surface gaps by control family and feed a working SPRS-style score.
Objective-level artifacts
Evidence registers organized by assessment objective (the unit a C3PAO tests), with refresh dates and owner accountability.
Who it's for
- Contractors running the program in-house who want a structured system instead of a folder of spreadsheets.
- Compliance leads inheriting a mess who need to put an existing effort in order without restarting it.
- ESPs and MSPs running multiple client programs on one consistent structure.
Request access and pricing.
Tell us about your program and we'll walk you through the system: what's templated, how it deploys into your Notion workspace, and current pricing. You can also email rj@indirectit.com directly.