🔒 CMMC Screening Tool

CMMC Readiness & Requirement Screening

A preliminary screening tool to help GovConLens understand your company's CMMC exposure, current status, and readiness position. Most companies complete this in 3–5 minutes.

Purpose of This Survey

  • Determine whether your company is currently operating under a CMMC requirement
  • Identify your current CMMC status, if any
  • Flag whether a CMMC assessment or certification may be needed
  • Identify potential remediation needs before pursuing DoD opportunities
  • Surface cases where CMMC applicability has not yet been established

This is a preliminary screening tool, not a CMMC certification or legal determination. Final CMMC requirements are established by the applicable solicitation, contract, and governing DoD requirements including 32 CFR part 170 and applicable DFARS provisions.

Question 1 of 10 0%
Question 1 of 10

Does your company currently perform work for the U.S. Department of Defense (DoD)?

Questions 2–9 are less likely to apply based on your answer. You may still complete them for planning purposes, or proceed to Question 10.
Question 2 of 10

Does your company currently receive, create, store, process, or transmit Federal Contract Information (FCI) in connection with a DoD contract?

FCI generally refers to information provided by or generated for the Government under a contract that is not intended for public release, subject to applicable exclusions.
Question 3 of 10

Does your company currently receive, create, store, process, or transmit Controlled Unclassified Information (CUI) in connection with a DoD contract or subcontract?

CUI is information that requires safeguarding or dissemination controls under applicable law, regulation, or government-wide policy. If your contract includes a DFARS 252.204-7012 clause, you likely handle CUI.
Question 4 of 10

Does any current or anticipated DoD solicitation, contract, task order, or subcontract specifically state a CMMC requirement?

Question 5 of 10

Does your company currently have a CMMC status recorded in SPRS?

Note: GovConLens uses "CMMC status" to refer to an established assessment outcome recorded in the Supplier Performance Risk System (SPRS). "CMMC compliant," "self-assessed," and "C3PAO-certified" are not interchangeable terms.
Question 6 of 10

If your company has a CMMC status, when was the assessment or status date?

Question 7 of 10

Has your company submitted the required affirmation of continuous compliance in SPRS?

CMMC status and the required SPRS affirmation are separate considerations. Current DFARS requirements include affirmation requirements associated with CMMC status under 32 CFR part 170.
Question 8 of 10

Which type of information system will be used to perform your DoD work?

Select all that apply

Do you know which specific systems process, store, or transmit FCI or CUI?

Question 9 of 10

What is your current CMMC readiness position?

Question 10 of 10

What is your primary CMMC objective?

Your responses are saved to your GovConLens profile to inform opportunity analysis and bid/no-bid recommendations.

🔒 GovConLens Preliminary Result

Your CMMC Preliminary Screening Result

Based on your responses. This is a screening output — not a compliance determination.

✓ Screening results saved to your GovConLens profile.

Your Responses

Important Disclaimer

GovConLens provides preliminary CMMC requirement and readiness screening based on information supplied by the customer and available procurement information. GovConLens does not issue CMMC certifications, determine legal compliance, replace a C3PAO assessment, or provide a binding determination of contractual CMMC requirements. The applicable solicitation, contract, DFARS provisions, 32 CFR part 170, and other controlling requirements govern. GovConLens identifies uncertainty rather than providing a false compliance determination. CMMC Phase 1 (November 10, 2025 – November 9, 2026) focuses primarily on Level 1 and Level 2 self-assessments; DoD may require Level 2 C3PAO or other levels in specific procurements.