GO GSA · Free CMMC readiness screening
Find your next step toward CMMC readiness.
Answer a short set of questions about your work and cybersecurity practices. Get an educational summary of your self-reported answers and practical next steps.
Self-reported and unverified educational guidance only—not a formal CMMC assessment, certification, or contract determination. Do not enter CUI, credentials, or sensitive technical details.
Do not enter or upload CUI, sensitive technical details, credentials, or government documents.
A practical starting point
Start with what you know. Flag what you don’t.
First, share a few details about your work, government information, and any stated contract requirement. Then review sampled cybersecurity topics. To view your preliminary summary, you must submit and save the required contact details and your answers; the form also requests a generic preparation email.
FCI is nonpublic information provided by or generated for the government under a contract. CUI is information the government identifies for safeguarding or dissemination controls. A System Security Plan (SSP) describes the system boundary and how applicable safeguards are addressed.
This is a sample of cybersecurity topics, not a complete assessment of every CMMC requirement. Your answers stay in this session until you submit the required form. They are saved only after a successful submission, which is required to show your report.