GAC-TOOL-002  ·  Level 2 Self-Assessment Tool

Your Level 2 CMMC.
Done in One Session.

Score all 110 NIST SP 800-171 Rev 2 controls, calculate your official SPRS score, and walk away with a formatted, submission-ready compliance package — in a single browser session.

110 Controls · NIST SP 800-171 r2
SPRS-Ready Scoring
L2 Policy Mini-Set Included
No Installation Required
Browser-Based · Works on Mobile
⚡ Get Instant Access — $997 See How It Works ↓
Is This Tool Right for You?

Level 2 Applies If You Can Answer Yes to These

✓
You Have DoD Contracts Handling CUI Your business processes, stores, or transmits Controlled Unclassified Information for the Department of Defense or a DoD prime contractor.
✓
You Need an SPRS Score Under CMMC Level 2 (Self) requires a NIST SP 800-171 assessment scored using the DoD Assessment Methodology and posted in SPRS under DFARS 252.204-7021 — that's what this tool generates.
✓
You Know Your Required Path Your contract calls for Level 2 (Self), or you're establishing a documented baseline ahead of a third-party or government assessment. Phase 2 third-party requirements are suspended, but Phase 1 self-assessment remains in force.
Not sure which level or assessment path your contract requires? Book a free discovery call — we'll tell you in 30 minutes.
⚠
Where the Program Stands Right Now

CMMC Phase 2 is suspended. On July 13, 2026, the Department suspended Phase 2, which would have required Third-Party Assessment for most CUI contracts starting November 10, 2026. A CMMC Reform Task Force is reviewing the program. Phase 1 remains fully in force — Level 1 (Self) and Level 2 (Self) requirements still appear in applicable solicitations and contracts, and 32 CFR Part 170 is unchanged.

Your exposure went up, not down. With no external assessor between you and the government, your Affirming Official's signature carries the full legal weight of the score. DoJ's Civil Cyber-Fraud Initiative remains active, and a false or inflated score is a False Claims Act matter. The Department also retains the right to conduct a Medium or High DIBCAC / Government Assessment under DFARS 252.240-7997, using NIST SP 800-171A per 32 CFR 170.24.

Clause numbering changed in February 2026. Under Class Deviation 2026-O0025, DFARS 252.204-7019 was deleted, 252.204-7020 was renumbered to 252.240-7997, and FAR 52.204-21 was renumbered to 52.240-93. The standalone “Basic Assessment” concept is gone — 7997 now defines only Medium and High assessments, both government-performed. The self-assessment and SPRS obligation for CUI contractors did not disappear; it now sits under the CMMC clause, DFARS 252.204-7021. DFARS 252.204-7012 is unchanged.

POA&M caveats: Requirements weighted at 5 points under the DoD Assessment Methodology are generally not POA&M-eligible and must be fully met. Where a conditional CMMC status applies, POA&M items must be closed within 180 days.

What's Inside

Everything You Need to
Score With Confidence

Not a checklist. Not a template. A structured, guided assessment that produces real output you can act on immediately.

📋
110-Control Assessment Engine
Step-by-step guided review of all 110 NIST SP 800-171 Rev 2 security requirements for CUI protection. Organized by the 14 control families. Plain-language descriptions with implementation notes and POA&M tracking.
NIST SP 800-171 Rev 2
📊
Live SPRS Score Calculator
Your score calculates in real time as you work through the controls. Final score matches DoD methodology — formatted for submission to PIEE (piee.eb.mil). Shows exactly which controls are dragging your score.
DoD Methodology
📄
Level 2 Policy Mini-Set
Auto-generates a formatted Level 2 policy document customized to your organization name and Affirming Official. Covers all 14 NIST SP 800-171 Rev 2 control families. Ready for signature.
Signature-Ready
⚠️
Gap Identification & Prioritization
Every NOT IMPLEMENTED control is flagged with plain-language remediation guidance. Gaps are prioritized by risk. Know exactly what to fix first before you submit your score.
Risk-Prioritized
📦
Exportable Results Package
Downloadable assessment summary, SPRS score certificate, and policy document — all formatted as print-ready PDFs. Keep them in your compliance file. Share with your prime contractor if requested.
PDF Export
🔒
Private & Secure
All assessment data stays in your browser — nothing is sent to a server. No account, no login, no subscription. Your compliance data belongs to you, not a SaaS platform.
Browser-Only Storage
Complete Package

Everything in
One Purchase

→
110-Control NIST SP 800-171 Rev 2 AssessmentFull guided assessment of all Level 2 requirements with plain-language descriptions and implementation guidance.
→
SPRS Score Output — DoD MethodologyDoD-methodology score calculation, formatted for submission to piee.eb.mil by your Affirming Official.
→
Level 2 Policy Mini-Set DocumentFormatted, customized policy document covering all 14 NIST 800-171 r2 control families. Signature-ready for your Affirming Official.
→
Gap Analysis & Remediation GuideEvery gap identified, explained, and prioritized. Know what to fix and in what order.
→
Exportable PDF Assessment PackageDownloadable results package suitable for your compliance file and prime contractor documentation requests.
GAC-TOOL-002  ·  Level 2 Assessment
Level 2 Self-Assessment Tool
$997
One-time purchase
12 months of access
✓ Credit Applied to Any Advisory Engagement
Includes
→110-control NIST SP 800-171 Rev 2 assessment engine
→Live SPRS score calculator — DoD methodology
→Level 2 Policy Mini-Set — customized & print-ready
→Gap analysis with remediation priorities
→Exportable PDF results package
→Browser-based — no install, no account required
⚡ Get Instant Access — $997 →
Secure checkout via Stripe  ·  Card or ACH
Access code delivered within 12 hours of payment
✓ Credit applies toward any Globe-America engagement
✓ Access Confirmed. Your Level 2 Self-Assessment Tool is ready. Click below to open it in a new tab.
Already Purchased? Enter Your Access Code
Your access code is emailed within 12 hours of purchase. Check your inbox or spam folder. Not received within 1 business hour? eddie.white@globe-america.com
Add Independent Review
Level 2 Self-Assessment + SPRS Score Validation
$1,497
$1,747 separately
Save $250
Score yourself against all 110 requirements, then have a CMMC Registered Practitioner review the scope, methodology and supporting record behind that number before your Affirming Official signs it.
→Everything in the Level 2 Self-Assessment Tool
→Scope and boundary check — what you assessed, and what you should have
→Scoring methodology review, including the two partial-credit requirements
→Written Validation Report
→Live findings debrief
Add Validation — $1,497 →
Validation is scheduled directly with Eddie White, RP-63638.
Limited slots each month  ·  Credit applies toward any Globe-America engagement
The Process

From Purchase to
Submission-Ready

Four steps. One session. Done.

1
Purchase & Access
Complete checkout via Stripe. Receive your access code within 12 hours by email. Enter it at globe-america.com/tools to unlock the tool.
Within 12 Hours
2
Run the Assessment
Work through all 110 NIST SP 800-171 r2 controls at your own pace. Mark each as implemented or not. Add optional notes per control. Resume any time — progress saves automatically.
~45–90 Minutes
3
Review Results
Your SPRS score displays in real time. Gaps are flagged with remediation guidance. Policy document auto-generates from your assessment inputs.
Immediate
4
Submit & Document
Export your results package. Your Affirming Official submits the score to SPRS at piee.eb.mil. File your policy document. You're compliant.
Same Session
Questions

Quick Answers

How is this different from just filling out a spreadsheet?
+
Spreadsheets don't calculate your SPRS score correctly, don't flag gaps automatically, and don't produce assessor-ready documentation. This tool uses the official DoD scoring methodology, auto-generates a policy document customized to your organization, and produces a formatted results package — not a raw spreadsheet your prime contractor will question.
What if I handle both FCI and CUI?
+
If your contracts handle Controlled Unclassified Information (CUI), Level 2 applies to your environment — this tool covers all 110 NIST SP 800-171 Rev 2 requirements and produces the score you post in SPRS under the CMMC clause, DFARS 252.204-7021. Phase 1 is in force today, which means applicable solicitations carry Level 2 (Self). Phase 2, which would have required Third-Party Assessment for most CUI contracts, is suspended as of July 13, 2026. If you only handle Federal Contract Information (FCI) and never touch CUI, you need Level 1 instead — sold separately at $497. If you're unsure which applies, the free discovery call will tell you definitively in 30 minutes. Don't guess — getting this wrong creates False Claims Act exposure.
Does self-assessment count as CMMC Level 2 Certification?
+
No. Level 2 (Self) and Level 2 (Third-Party) are distinct CMMC statuses, and a self-assessed score is not a certification. What changed is timing: Phase 2, which would have required Third-Party Assessment for most CUI contracts beginning November 10, 2026, was suspended on July 13, 2026 pending a CMMC Reform Task Force review. During Phase 1, applicable solicitations carry Level 2 (Self), and the Department retains discretion to require Level 2 (Third-Party) on individual contracts. Separately, the government may conduct a Medium or High DIBCAC / Government Assessment under DFARS 252.240-7997 at any time. Treat the pause as a timing change, not a reduction in what you have to implement — and read your own contract, because a prime's flow-down obligations did not change on July 13. If you need full Third-Party Assessment readiness (audit-ready SSP, evidence package, mock assessment), that's the Globe-America Compliance Foundation engagement, not this tool.
Does this tool submit my SPRS score for me?
+
No — and it shouldn't. SPRS submissions must be made by your organization's Affirming Official directly at piee.eb.mil. The tool calculates your score and documents your assessment, but the submission is a legal act by your senior official — that step belongs to them, not a third-party tool.
I already have a SPRS score. Is this still useful?
+
Yes — especially if your score was filed by an IT vendor or staff member who wasn't fully familiar with the scoring methodology. This tool lets you run an independent self-assessment and compare it to your submitted score. If there's a discrepancy, better to find it now than during a government assessment or prime contractor review. If you want a formal written validation instead, consider the SPRS Validation Report.
How does access work after purchase?
+
After completing checkout on Stripe, you'll receive a unique access code by email. Enter that code at the tool portal (globe-america.com/tools) to unlock the Level 2 Self-Assessment. Your code unlocks the tool for 12 months from activation. Use it as many times as you need during that window — re-run the assessment, update your scores, regenerate your package. Progress saves in your browser automatically so you can pause and return.
Does the $997 apply toward a larger engagement?
+
Yes — 100% of the $997 is credited toward any Globe-America advisory engagement (Tier 3, Tier 2, or Tier 1). It's not a discount — it's a credit, applied in full. Most clients who start with this tool and find they have Level 2 requirements move into a Tier 3 engagement within 90 days.
Ready to Get Compliant?

Your SPRS Score.
This Session.

One-time purchase. 12 months of access. No subscription, no auto-renewal.

⚡ Get Instant Access — $997 → Not Sure? Book Free Call First
Credit applies toward any Globe-America engagement  ·  Secure checkout via Stripe