Everything you need to document CMMC Level 2 — the finished, editable versions of what our free tools draft, and as of July, the free tools draft all 110. Phase 2's third-party assessments are paused; the self-assessment paperwork your contracts still require isn't. Skip the blank pages.
You've run the free SPRS calculator and SSP generator and you know exactly what CMMC Level 2 asks for. The kit is the shortcut: those same answers, generated into polished, editable, assessment-ready documents — so you finish in an afternoon instead of retyping your work into blank templates for weeks. The knowledge stays free. This just saves you the grind.
An 80-second walkthrough — from self-assessment to finished packet.
The free tools draft all 110 requirements. The kit is the finished, editable version — plus the 14 policies no tool drafts for you.
The tools draft everything. One assessment, three outputs.
Delivered as plain exports (.doc / copy-paste). No email gate on the results, no subscription, no upsell wall.
The finished, branded document set — plus the two things no tool drafts.
Every document is fully editable and yours to keep. Anything you haven't answered yet arrives as a clearly marked "to complete" block — we don't write compliance prose you didn't tell us was true.
The free tools will always draft your SSP, POA&M and score in plain formats, and you can copy them out by hand for nothing. If that's all you need, use the free tools — genuinely. The kit is the finished version: the same answers, merged into branded documents, plus the policies and playbook no tool drafts for you.
A 39-page guided playbook plus the finished, editable documents that turn "I understand the controls" into "my documentation is done" — with the real sample pages below, so you know exactly what you're getting.
The full set of NIST 800-171 / CMMC policies an assessor expects — pre-written, plain-English, and editable to your environment.
Sequencing, what an assessor expects to see, and how to tailor each document to your environment — control by control, in plain English.
Your all-110 SSP draft, delivered as a designed, branded working document — refine it, don't reformat it.
The 180-day-clock spreadsheet with eligibility rules built in, so you track only the gaps that can actually ride on a POA&M.
Which controls a GCC High / enclave provider typically covers versus what stays on you — so you stop documenting controls you inherit.
The high-impact controls that move your SPRS score the most, sequenced so you close the biggest gaps first.
What to have ready — documents, evidence, and demos — before a self-assessment or a C3PAO walks in.
No mystery box. These are legible sample pages, watermarked and not copyable, so you can judge the quality before you buy — the delivered files are fully editable and unmarked.
Defines how your organization restricts access to its information systems and CUI — to authorized users and devices, and to only the functions each is permitted to perform.
| # | Control | Weakness / Gap | Pts | Status |
|---|---|---|---|---|
| 1 | 3.5.3 | MFA not enforced for remote/admin access | 5 | Open |
| 2 | 3.13.11 | BitLocker not in FIPS mode on 4 laptops | 5 | In Prog |
| 3 | 3.8.9 | Backups not encrypted (validated module) | 1 | Open |
| 4 | 3.4.2 | Security config settings not enforced | 5 | Open |
| 5 | ||||
| 6 |
| Fam | Control Family | What the cloud covers | Resp. |
|---|---|---|---|
| 3.1 | Access Control | Platform IAM, MFA capability | Shared |
| 3.2 | Awareness & Training | — | Customer |
| 3.3 | Audit & Accountability | Platform logging, retention | Shared |
| 3.5 | ID & Authentication | Identity platform, MFA/FIDO2 | Shared |
| 3.10 | Physical Protection | Data-center security (inherited) | Provider |
Actual sample pages from the kit — the real navy-and-gold Playbook cover, a branded policy template, and the POA&M and Cloud Inheritance trackers. Legible, watermarked, and not copyable here; the files you download are fully editable and unmarked.
The CMMC documentation market is built on retainers and sales calls. We built the opposite.
| Objective320 Kit | Typical alternatives | |
|---|---|---|
| Price | $99 one-time | $950–$5,000 / year |
| Files | Editable — you own them | Often locked or subscription-bound |
| To buy | Instant download | "Contact us" / sales call |
| See before you buy | Real document previews | Rarely |
| Built on | The same free tools you already trust | A black box |
Locked in for the first cohort while we expand the kit. Goes to $149 after launch. Instant download, one-time, no subscription.
Get the Starter Kit — $99Fair refund policy: changed your mind? Ask any time before you download and we'll refund in full. Because it's an instant digital download, sales are final once you've downloaded the files — but if anything is wrong or won't open, email support@objective320.com and we'll make it right.
The free tools will always draft your SSP, POA&M and score in plain formats, and you're welcome to copy them out by hand. What you're paying for is that the kit generates those documents from your own answers — branded, formatted, editable — plus the 14 policy templates (the tools draft your SSP; they do not draft policies) and the 39-page playbook.
You don't need it — the free calculator, SSP generator, and control library get you there. The kit just saves you the hours of formatting, policy-writing, and assembling everything into assessment-ready documents. Sign in with the email you bought with and your assessment flows straight into the documents.
You get the full template kit immediately — nothing is withheld and nothing is gated behind finishing an assessment. Whenever you do work through the free tools, come back to your download link and the SSP, POA&M and score report will generate from your answers. Buying first is completely fine.
Yes — included, and unlimited. Every time you answer more in the free tools, download again and the documents rebuild from your current assessment. There's no extra charge and no cap. Anything still unanswered shows up as a clearly marked "to complete" block rather than invented prose, so the document is always honest about where you actually stand.
It's built on the same NIST 800-171 Rev 2 control set and Department of War scoring our free tools use — accuracy is the whole point of Objective320. The documents are starting points you tailor to your real environment; they're not a guarantee of passing, and your SSP must describe your actual systems truthfully.
No. One-time purchase, instant download, files you keep and edit. No recurring charge.
Yes — a full refund any time before you download the kit, no questions asked. Since it's an instant digital download, sales are final once you've downloaded the files. If a file won't open or something's wrong, email us and we'll fix it.
Founding buyers get the current kit plus the next update at no extra cost as the rules evolve.