CMMC Level 2 Self-Assessments Require at Least 88 Points and Mandatory Controls
Summary
Huntress explains that CMMC Level 2 self-assessments require at least 88 points and all non-POA&M-able requirements. Unmet items trigger a 180-day closeout period before Conditional status expires.
Key points
- The article says CMMC Level 2 self-assessments use the CMMC scoring methodology, with a minimum score of 88 out of 110 for Conditional Level 2 (Self) status.
- All requirements worth three or five points, plus a specified set of one-point requirements, must be implemented; the mandatory requirements account for 64 points, according to the article.
- Contractors can choose which 24 of the remaining 46 one-point requirements to implement to reach the 88-point minimum.
- Submitting an assessment with unmet requirements starts a 180-day period to close them out; otherwise, Conditional status expires.
- The article warns that expired status may affect eligibility for contract awards or options when CMMC Level 2 status and an SPRS affirmation are required.
Article Details
- Event Type
- CMMC Level 2 compliance requirements and assessment guidance
- Impact
- The article explains that contractors seeking CMMC Level 2 (Self) status must score at least 88, implement all three- and five-point requirements and specified one-point requirements, and close out unmet requirements within 180 days. Failure to maintain the required status and affirmation in SPRS may make a contractor ineligible for contract awards or options.