27 tools in the suite. 5 are open to you right now.
Everything below is built and running today. Where you sit on this ladder decides how much of it you can use. The open tools are genuinely free, with no login and no email required, and now live on their own Complimentary Free Tools page.
22
Tools locked
Purchased Tools
3 tools
$497 – $997 each
Bronze
5 tools
Engagement required
Silver
6 tools
Engagement required
Gold
5 tools
Engagement required
G
Govern the Boundary
A
Align Evidence
R
Reinforce Implementation
D
Defend the Assessment
Cyber G.A.R.D.™ · Globe-America Consulting · Proprietary GARD Framework
Prospect Resources
5 complimentary · 3 purchasable
Complimentary Free Tools
Five open-access CMMC tools: C3 Kit, ROI Calculator, Assessment Defense Checklist, Subcontractor Readiness Scorecard, and the Cyber G.A.R.D.™ Self-Assessment. No login, no email, no cost.
Open the Free Tools Page →
🔒 Paid Prospect — Access Code Required
Self-Assessment & Validation Tools
Standalone tools available for individual purchase. Access code provided at checkout.
Level 1 Self-Assessment Tool
15 FAR 52.240-93 (formerly 52.204-21) controls · SPRS-ready affirmation · L1 Policy Mini-Set generator
🔒 Access Code · $497
View Details →
Level 2 Self-Assessment Tool
110 NIST SP 800-171 Rev 2 controls · SPRS-ready scoring · L2 Policy Mini-Set generator
🔒 Access Code · $997
View Details →
SPRS Validation Report
RP-signed advisory memo · Submission accuracy review (L1 affirmation or L2 score) · Risk assessment · 5-day written deliverable
🔒 Access Code · $750
View Details →
Bronze — Compliance Foundation
6 tools locked
Bronze
Compliance Foundation
Establish your SPRS score, document gaps, build your policy library and compliance roadmap. Includes 8–12 advisory hours with a CMMC Registered Practitioner.
$15K–$32K
One-Time
✓ Unlocked
SPRS Score Calculator + POA&M Builder
All 110 NIST controls — live DoD scoring & auto-populated POA&M
🔒 BronzeCompliance Roadmap Builder
Phased 4-step remediation plan with milestones & domain priorities
🔒 BronzeSSP Scope & Intake Tool
6-section CUI boundary intake — generates SSP Scope Brief for advisor
🔒 BronzeBoundary Mapper
Network diagram & asset inventory from one model — CMMC L1 and L2 scoping validation
🔒 BronzeCore Policy Set Generator
NIST-compliant starter policies for all 14 domains — formatted Policy Library output
🔒 BronzePOA&M Closeout Tracker
180-day remediation countdown — post-assessment conditional certification closeout
🔒 Bronze
Incorrect access code. Contact your Globe-America advisor.
Active Bronze clients receive access codes from their advisor.
Silver — Readiness & Governance
7 tools locked
Silver
Readiness & Governance
Full 3-year Third-Party Assessment cycle — assessment prep, annual affirmations, and re-certification. Includes 16–24 advisory hours/year (use or lose). Billed annually.
$52K–$72K
Over 3 Years
✓ Unlocked
Contract Compliance Decoder + Tracker
DFARS/FAR clause decoder & Contract Compliance Tracker — 12 key clauses
🔒 SilverCUI Scoping Wizard
5-step guided CUI identification & enclave strategy
🔒 SilverBoundary Mapper + Gate Review
Signed boundary before SSP work begins — re-baselined on architecture or scope change
🔒 SilverPolicy Gap Checker
All 14 NIST domains — policy status & gap report
🔒 SilverEvidence Tracker
48 evidence artifacts — live readiness scoring
🔒 SilverRACI / Control Ownership Builder
Assign R/A/C/I roles to all 14 NIST domains — governance matrix output
🔒 SilverProcedure Builder
Tool-specific step-by-step procedures for 6 key domains — 28 tool configurations
🔒 Silver
Incorrect access code. Contact your Globe-America advisor.
Gold — Continuous Compliance Oversight
6 tools locked
Gold
Continuous Compliance Oversight
Continuous monitoring, mock assessments, and supply chain oversight. Includes 8–20 advisory hours/month across three retainer plans (Standard, Active, Executive).
$5K–$12K
Per Month
✓ Unlocked
Executive Compliance Dashboard
SPRS score history, POA&M status, domain implementation health & supplier readiness
🔒 GoldDefense Mock Assessment
All 14 NIST domains — Third-Party Assessment methodology — live SPRS estimate
🔒 GoldSSP Builder Assistant
8-section guided System Security Plan builder for all 110 controls
🔒 GoldBoundary Mapper + Change Monitoring
Boundary review triggered by environment or vendor change — diagram stays current
🔒 GoldSupply Chain Checker
Per-subcontractor flow-down determination — required CMMC level, clauses & risk
🔒 GoldCompliance Calendar
Auto-computes annual affirmation, triennial reassessment, 180-day POA&M & ConMon dates
🔒 Gold
Incorrect access code. Contact your Globe-America advisor.
Why the timing matters
Self-assessment is already required
The Phase 2 pause changed the certification phase-in schedule. It did not remove Level 1 and Level 2 self-assessment obligations, and it did not touch what your prime flows down to you.
Contract cycles do not wait
Readiness work is measured in months, not weeks. Scoping, documentation, and evidence collection all have to happen before the award you are chasing, not after it.
This is a solo practice
Every engagement is run by Eddie White personally, which puts a real ceiling on how many run at once. That is the honest constraint, not a sales tactic.
Start with the complimentary free tools. Move up when it makes sense.
Active clients receive engagement access codes from their Globe-America advisor. Not yet a client? Schedule a Readiness Consultation — 60 minutes with Eddie White, CMMC Registered Practitioner, applied as credit toward your engagement.