Compliance scorecard
NIST SP 800-171 Rev. 2 / CMMC Level 2
As of 2026-06-20. Aggregate progress only — the detailed per-control record lives in your secure workspace, never on this portal.
NIST SP 800-171 Rev. 2 / CMMC Level 2 — an aggregate implementation status plus a family-level roll-up (RAG) and the project workflow status per family. High-level status only: the detailed per-control record lives in your secure workspace, never here.
Sample data — preview only. This portal shows high-level project progress with canned figures; it never holds your CUI, security documentation, or evidence. Documents open in your secure enclave via links.
Compliance scorecard
As of 2026-06-20. Aggregate progress only — the detailed per-control record lives in your secure workspace, never on this portal.
| Control family | Roll-up | Workflow status |
|---|---|---|
| AC Access Control | In progress In progress | Policies approved; evidence collection in progress |
| AT Awareness & Training | Completed Completed | Complete; annual refresh scheduled |
| AU Audit & Accountability | In progress In progress | Log policy drafted; correlation tuning underway |
| CM Configuration Management | In progress In progress | Baselines drafted; enforcement rollout in progress |
| IA Identification & Authentication | In progress In progress | MFA enrolled; residual factors in remediation |
| IR Incident Response | In progress In progress | Plan approved; tabletop exercise pending |
| MA Maintenance | Completed Completed | Implemented; evidence approved |
| MP Media Protection | In progress In progress | Procedures drafted; evidence in progress |
| PS Personnel Security | Completed Completed | Implemented; evidence approved |
| PE Physical Protection | Completed Completed | Implemented; evidence approved |
| RA Risk Assessment | Review not started Review not started | In remediation; owner assigned, milestone set |
| CA Security Assessment | In progress In progress | Assessment plan drafted; review underway |
| SC System & Communications Protection | In progress In progress | Architecture review in progress; controls staging |
| SI System & Information Integrity | In progress In progress | Monitoring deployed; tuning in progress |
Control-family roll-up (RAG) + process status only. The portal never shows per-control implemented/not-implemented status, itemized control detail, security documentation, or evidence — those stay in your secure enclave. Sample data shown until your program backend is connected.