CMMC Level 2 isn't optional. Make it operational.
Updated — July 13, 2026 memo
The Department of War has suspended CMMC Phase II and third-party (C3PAO) Level 2 designations pending a 60-day reform review. During the review, contracts may require only Level 1 and Level 2 self-assessments — with a minimum SPRS score of 88/110 and an annual signed affirmation. The standard didn't get easier; the assessor changed. It's you. Read what changed →
Tens of thousands of DoW subcontractors need to reach CMMC Level 2 to keep their place in the supply chain. As of July 2026, nearly all of them will get there by self-assessment — which means the credibility of your evidence is the whole game.
FORCE was built with native CMMC Level 2 alignment from day one — not as a framework added later. The same evidence chain that supports our FedRAMP and SOC 2 customers maps directly to NIST SP 800-171 control families, POA&M requirements, and the CMMC assessment workflow. Your self-assessment stands on collected, hashed evidence — and if third-party assessments return after the reform review, a C3PAO sees a complete, OSCAL-ready package on day one.
Pricing is set so a small defense subcontractor can afford the platform that keeps them in the supply chain.
FORCE itself operates to NIST SP 800-171 controls today, maintains its own self-assessment and SPRS affirmation on the platform, and remains C3PAO-ready for when the review concludes. The platform you trust with your compliance posture is instrumented to the same standard your prime contractor will hold you to.
800-171 native
Every control family pre-mapped. Evidence collection is automatic; the assessment package writes itself.
POA&M as artifact
OSCAL-formatted POA&M generated from real findings — not a spreadsheet you maintain by hand.
Self-assessment that stands up
Evidence-backed findings, an 88/110 SPRS floor indicator, and a signed affirmation trail. When the C3PAO era resumes, the assessor portal is already built.
SPRS submission, included
FORCE generates the SPRS submission package directly from your live evidence — score, narrative, and artifact references, all from the same hashed chain. With the 88/110 floor now the gate for Level 2 (Self), your SPRS score isn't paperwork — it's the contract condition.
See SPRS submission details →