GAC-TOOL-002  ·  Level 2 Self-Assessment Tool

Your Level 2 CMMC.
Done in One Session.

Score all 110 NIST SP 800-171 Rev 2 controls, calculate your official SPRS score, and walk away with a formatted, submission-ready compliance package — in a single browser session.

110 Controls · NIST SP 800-171 r2
SPRS-Ready Scoring
L2 Policy Mini-Set Included
No Installation Required
Browser-Based · Works on Mobile
⚡ Get Instant Access — $1,497 See How It Works ↓
Is This Tool Right for You?

Level 2 Applies If You Can Answer Yes to These

✓
You Have DoD Contracts Handling CUI Your business processes, stores, or transmits Controlled Unclassified Information for the Department of Defense or a DoD prime contractor.
✓
You Need a DFARS 7019/7020 SPRS Score DFARS 252.204-7019 and 7020 require every contractor handling CUI to submit a NIST SP 800-171 Basic Assessment score in SPRS — that's what this tool generates.
✓
You Know Your Required Path You've confirmed your contract permits self-assessment OR you need to document your score before pursuing C3PAO certification. Self-assessment is permitted only for a limited subset of L2 contracts.
Not sure whether your contract requires self-assessment or C3PAO certification? Book a free discovery call — we'll tell you in 30 minutes.
⚠
Important — Self-Assessment Is Not C3PAO Certification

Under CMMC 2.0, the majority of contracts handling CUI require a C3PAO-conducted certification assessment, not self-assessment. Self-assessment is permitted only for a limited subset of L2 contracts (non-prioritized acquisitions). Verify your required assessment type in your contract, DD-254, or with your contracting officer before relying on a self-assessed score.

This tool generates the DFARS 252.204-7019 / 7020 Basic Assessment score that every contractor handling CUI must submit in SPRS — whether you ultimately self-attest or pursue C3PAO certification. The scoring is identical; the difference is who validates it.

POA&M caveats: Controls weighted at 5 points under the DoD Assessment Methodology are generally not POA&M-eligible and must be fully met. For CMMC 2.0 conditional certification, POA&M items must be closed within 180 days. Submitting a false or inflated score creates False Claims Act liability.

What's Inside

Everything You Need to
Self-Attest with Confidence

Not a checklist. Not a template. A structured, guided assessment that produces real output you can act on immediately.

📋
110-Control Assessment Engine
Step-by-step guided review of all 110 NIST SP 800-171 Rev 2 security requirements for CUI protection. Organized by the 14 control families. Plain-language descriptions with implementation notes and POA&M tracking.
NIST SP 800-171 Rev 2
📊
Live SPRS Score Calculator
Your score calculates in real time as you work through the controls. Final score matches DoD methodology — formatted for submission to PIEE (piee.eb.mil). Shows exactly which controls are dragging your score.
DoD Methodology
📄
Level 2 Policy Mini-Set
Auto-generates a formatted Level 2 policy document customized to your organization name and Affirming Official. Covers all 14 NIST SP 800-171 Rev 2 control families. Ready for signature.
Signature-Ready
⚠️
Gap Identification & Prioritization
Every NOT IMPLEMENTED control is flagged with plain-language remediation guidance. Gaps are prioritized by risk. Know exactly what to fix first before you submit your score.
Risk-Prioritized
📦
Exportable Results Package
Downloadable assessment summary, SPRS score certificate, and policy document — all formatted as print-ready PDFs. Keep them in your compliance file. Share with your prime contractor if requested.
PDF Export
🔒
Private & Secure
All assessment data stays in your browser — nothing is sent to a server. No account, no login, no subscription. Your compliance data belongs to you, not a SaaS platform.
Browser-Only Storage
Complete Package

Everything in
One Purchase

→
110-Control NIST SP 800-171 Rev 2 AssessmentFull guided assessment of all Level 2 requirements with plain-language descriptions and implementation guidance.
→
SPRS Score Output — DoD MethodologyDoD-methodology score calculation, formatted for submission to piee.eb.mil by your Affirming Official.
→
Level 2 Policy Mini-Set DocumentFormatted, customized policy document covering all 14 NIST 800-171 r2 control families. Signature-ready for your Affirming Official.
→
Gap Analysis & Remediation GuideEvery gap identified, explained, and prioritized. Know what to fix and in what order.
→
Exportable PDF Assessment PackageDownloadable results package suitable for your compliance file and prime contractor documentation requests.
GAC-TOOL-002  ·  Level 2 Assessment
Level 2 Self-Assessment Tool
$1,497
One-time purchase
12 months of access
✓ Credit Applied to Any Advisory Engagement
Includes
→110-control NIST SP 800-171 Rev 2 assessment engine
→Live SPRS score calculator — DoD methodology
→Level 2 Policy Mini-Set — customized & print-ready
→Gap analysis with remediation priorities
→Exportable PDF results package
→Browser-based — no install, no account required
⚡ Get Instant Access — $1,497 →
Secure checkout via Stripe  ·  Card or ACH
Access code delivered within 12 hours of payment
✓ Credit applies toward any Globe-America engagement
✓ Access Confirmed. Your Level 2 Self-Assessment Tool is ready. Click below to open it in a new tab.
Already Purchased? Enter Your Access Code
Your access code is emailed within 12 hours of purchase. Check your inbox or spam folder. Not received within 1 business hour? eddie.white@globe-america.com
The Process

From Purchase to
Submission-Ready

Four steps. One session. Done.

1
Purchase & Access
Complete checkout via Stripe. Receive your access code within 12 hours by email. Enter it at globe-america.com/tools to unlock the tool.
Within 12 Hours
2
Run the Assessment
Work through all 110 NIST SP 800-171 r2 controls at your own pace. Mark each as implemented or not. Add optional notes per control. Resume any time — progress saves automatically.
~45–90 Minutes
3
Review Results
Your SPRS score displays in real time. Gaps are flagged with remediation guidance. Policy document auto-generates from your assessment inputs.
Immediate
4
Submit & Document
Export your results package. Your Affirming Official submits the score to SPRS at piee.eb.mil. File your policy document. You're compliant.
Same Session
Questions

Quick Answers

How is this different from just filling out a spreadsheet?
+
Spreadsheets don't calculate your SPRS score correctly, don't flag gaps automatically, and don't produce assessor-ready documentation. This tool uses the official DoD scoring methodology, auto-generates a policy document customized to your organization, and produces a formatted results package — not a raw spreadsheet your prime contractor will question.
What if I handle both FCI and CUI?
+
If your contracts handle Controlled Unclassified Information (CUI), Level 2 applies to your environment — this tool covers all 110 NIST SP 800-171 Rev 2 controls and generates the SPRS Basic Assessment score required under DFARS 252.204-7019/7020. Note: under CMMC 2.0, most CUI-handling contracts require a C3PAO-conducted certification assessment, not self-assessment. This tool produces the assessment documentation either path requires. If you only handle Federal Contract Information (FCI) and never touch CUI, you need Level 1 instead — sold separately at $497. If you're unsure which applies, the free discovery call will tell you definitively in 30 minutes. Don't guess — getting this wrong creates False Claims Act exposure.
Does self-assessment count as CMMC Level 2 Certification?
+
No — and this is one of the most misunderstood points in CMMC 2.0. Self-assessment is permitted only for a limited subset of L2 contracts (non-prioritized acquisitions). The majority of L2 contracts handling CUI require a C3PAO-conducted certification assessment, not self-attestation. However, DFARS 252.204-7019 and 7020 still require every CUI-handling contractor to submit a Basic Assessment score in SPRS — this tool generates that score using the official DoD Assessment Methodology, regardless of which path your contract requires. If you need full C3PAO certification readiness (audit-ready SSP, evidence package, mock assessment), that's the Globe-America Compliance Foundation engagement, not this tool.
Does this tool submit my SPRS score for me?
+
No — and it shouldn't. SPRS submissions must be made by your organization's Affirming Official directly at piee.eb.mil. The tool calculates your score and documents your assessment, but the submission is a legal act by your senior official — that step belongs to them, not a third-party tool.
I already have a SPRS score. Is this still useful?
+
Yes — especially if your score was filed by an IT vendor or staff member who wasn't fully familiar with the scoring methodology. This tool lets you run an independent self-assessment and compare it to your submitted score. If there's a discrepancy, better to find it now than during a DoD audit or prime contractor review. If you want a formal written validation instead, consider the SPRS Validation Report.
How does access work after purchase?
+
After completing checkout on Stripe, you'll receive a unique access code by email. Enter that code at the tool portal (globe-america.com/tools) to unlock the Level 2 Self-Assessment. Your code unlocks the tool for 12 months from activation. Use it as many times as you need during that window — re-run the assessment, update your scores, regenerate your package. Progress saves in your browser automatically so you can pause and return.
Does the $1,497 apply toward a larger engagement?
+
Yes — 100% of the $1,497 is credited toward any Globe-America advisory engagement (Tier 3, Tier 2, or Tier 1). It's not a discount — it's a credit, applied in full. Most clients who start with this tool and find they have Level 2 requirements move into a Tier 3 engagement within 90 days.
Ready to Get Compliant?

Your SPRS Score.
This Session.

One-time purchase. 12 months of access. No subscription, no auto-renewal.

⚡ Get Instant Access — $1,497 → Not Sure? Book Free Call First
Credit applies toward any Globe-America engagement  ·  Secure checkout via Stripe