We start by giving you the first two templates we use for a NIST 800-171 and CMMC ML3 self-assessment... a presentation for your first kick-off meeting, and the gap assessment template with helpful guidance for all 130 requirements.  The gap assessment auto-generates a score to upload into the SPRS system, as required by the Interim Rule.  

While you and your I.T. person work through the gap assessment, we're available for unlimited email coaching to help you answer questions that aren't obvious from the templates provided.  

Once your initial gap assessment is complete, we'll review it and help you build your project plan (or "POAM" in DoD-speak) for what you need to do to reach compliance.  We also provide vendor recommendations based on our project experience.  

Once you have your gap assessment and POAM in place, we'll provide you with two templates you need to reach compliance.  A simple NIST 800-171 System Security Plan (SSP) that can help you comply with the DoD Interim rule (mandatory in 2021), and then a more complete SSP that can help you down the path of preparing for CMMC compliance.