CMMC checklist

The Cybersecurity Maturity Model Certification (CMMC) program was developed by the Department of Defense (DoD) to ensure contractors and subcontractors implement cybersecurity controls and processes that adequately protect Controlled Unclassified Information (CUI) and Federal Contract Information (FCI) residing on Defense Industrial Base (DIB) systems and networks.

feature CMMC Checklist 1 0

Download the checklist to learn how to:

Understand CMMC program requirements and NIST 800-171 Rev 2

Identify CMMC level, in-scope assets, and gaps in your compliance program 

Prepare an implementation plan, documentation, and for your C3PAO assessment 

Choose a C3PAO and undergo the assessment

Continuously improve your CMMC compliance and adhere to future requirements

5,700+ companies trust A-LIGN for their compliance and cybersecurity needs

WS client OpenGov
WS client MicroStrategy (1)
WS client InEignt
WS client Juvare
WS client nuvolo (1)
WS client Peraton

A top FedRAMP assessor with extensive experience in NIST frameworks

Cyber AB Cert 2
1K+ federal assessments
completed
#3 FedRAMP assessor
96% client satisfaction
rating
100% FedRAMP PMO
acceptance

One stop for all your compliance efforts

A-LIGN leverages a vast network of resources, experience, and professional relationships to ensure your organization is ready and approved to support government agencies, minimize risks, and keep their data safe against cybersecurity threats.

FedRAMP


If you are a Cloud Service Provider (CSP) currently providing, or seeking to provide, services to federal agencies, A-LIGN can make your FedRAMP process seamless. We will support you during your entire FedRAMP journey, from readiness to authorization.

Learn More

FISMA


A-LIGN’s expert federal assessors can help your company meet FISMA’s requirements for all agencies to develop, document, and implement an information security and protection program.

Learn More

NIST 800-171


As an organization interested in working on a federal contract, you must implement the appropriate NIST 800-171 controls. These cybersecurity control measures protect vital information in nonfederal systems and organizations.

Learn More

Badge SOC 1 1 0
Badge SOC 2 1 0
Badge PCI DSS 1 0
Badge PCI SSF 1 0
Badge ISO 27001 1 0
Badge 22301 1 0
Badge 27701 1 0
Badge 42001 1 0
Badge HITRUST 1 0
Badge HIPAA 1 0
Badge FedRAMP 1 0
Badge StateRAMP 1 0
Badge FISMA 1 0
Badge CMMC 1 0
Badge NIST 800 171 1 0
Badge CCPA 1 0
resource feature Quiet Proffesional 1 0

“A-LIGN was a strong partner throughout the process to achieve CMMC Level 2 certification. Their structured approach and expertise helped validate the work our cybersecurity team has done.”

Cory Wilson, Director of Information Technology at Quiet Professionals

Gradient Map 3 blue

From readiness to certification, A-LIGN has everything you need to work with the Department of Defense. Download our checklist to help your organization prepare to achieve certification success.