Walk through all 110 NIST SP 800-171 requirements. Answers autosave to your assessment record.
Assessment Operations · CMMC Level 2
Upload evidence. Athena drafts the SAR, POA&M, SPRS score, eMASS JSON, and OSCAL package — every finding mapped to an assessment objective, every artifact hashed for defense.
Other GRCs stop at contractor readiness. Athena owns the assessor-facing submission layer — SAR drafting, eMASS packaging, OSCAL output, and cryptographic provenance — that C3PAOs, DIBCAC, and program offices actually open on engagement day.
SAR · POA&M · SPRS submission · eMASS-ready JSON · OSCAL package · evidence binder with SHA-256 hashes · signed chain-of-custody manifest.
Authored & maintained by Athena Consulting Group — CMMC Level 2 practitioners aligned to 32 CFR Part 170, NIST SP 800-171 Rev. 2, and NIST SP 800-171A. This page requires JavaScript for the interactive experience.