RESOURCE // CMMC L2 CHECKLIST
110 controls. 14 families. One PDF.
NIST 800-171 r2 · CMMC L2
All 110 NIST SP 800-171 controls organized by control family. Built for defense contractors preparing for C3PAO assessment before the November 2026 deadline. Implementation status tracking + POA&M template included.
DOWNLOAD PACKAGE
CMMC L2 Checklist
PDF · 110 CONTROLS · 14 FAMILIES
- All 110 NIST 800-171 controls
- Organized by 14 control families
- Implementation status tracking
- Evidence documentation guide
- POA&M template included
CONTROL FAMILIES · 14
The checklist covers every control family in NIST SP 800-171 Rev 2, required for CMMC Level 2 certification.
- ACAccess Control22
- ATAwareness & Training3
- AUAudit & Accountability9
- CMConfiguration Management9
- IAIdentification & Authentication11
- IRIncident Response3
- MAMaintenance6
- MPMedia Protection9
- PEPhysical & Environmental6
- PSPersonnel Security2
- RARisk Assessment3
- CASecurity Assessment4
- SCSystem & Comms Protection16
- SISystem & Info Integrity7
OR · AUTOMATE IT
Skip the checklist. Run the platform.
PolicyCortex continuously monitors all 110 controls, auto-collects evidence, and generates C3PAO-ready documentation.
Book 30-min demo