Maintained by AffirmReady Support
If you work with the Department of Defense, a prime contractor has asked you about CMMC, or you have seen a new clause in a contract and are not sure what it means for your business, this article explains what AffirmReady is and how it can help.
The short answer
AffirmReady is a software platform that helps small defense contractors get ready for CMMC Level 1. It walks you through the 15 basic security requirements, helps you see where you stand, keeps track of what still needs to be done, and helps you get organized before your company completes its annual self-assessment and affirmation in SPRS (the Supplier Performance Risk System).
Who AffirmReady is built for
AffirmReady is designed for small and mid-sized businesses that handle Federal Contract Information (FCI). FCI is information the government provides or creates under a contract that is not intended for public release, such as contract details, pricing, schedules, or internal project correspondence. Most companies in this position do not have a dedicated compliance team, and AffirmReady is built so a business owner, office manager, or IT contact can work through it in plain language.
What AffirmReady helps you do
- Understand the requirements. Each of the 15 CMMC Level 1 requirements is explained in everyday terms, with examples of what meeting it typically looks like in a small business.
- Find your gaps. The free Readiness Check asks 10 plain-English questions and shows you what to tackle first.
- Work through every requirement. A guided walkthrough takes you through all 15 requirements, so nothing falls through the cracks.
- Keep track of your evidence. You record where your supporting documentation lives in your own systems, so you can find it quickly when you need it. AffirmReady does not store your evidence files.
- Fill documentation gaps and stay on schedule. Ready-to-edit policy templates help with written policies, and reminders arrive before your annual affirmation is due.
- Prepare for your affirmation. When your walkthrough is complete, you will have an organized record to support the person in your company who signs the annual affirmation.
What AffirmReady does not do
AffirmReady is a readiness tool. It does not submit your self-assessment or affirmation to SPRS for you, it does not connect to or change your Microsoft 365 or other systems, and it does not provide legal advice or certify your company. The decision to affirm compliance, and responsibility for its accuracy, stays with your company. For more detail, see KB-028: Is AffirmReady a C3PAO, consultant, or legal advisor?
Does AffirmReady cover CMMC Level 2?
No. AffirmReady focuses on CMMC Level 1, which applies to companies that handle FCI under DoD contracts that include the CMMC requirement. Level 2 applies to companies that handle Controlled Unclassified Information (CUI) and involves 110 requirements from NIST SP 800-171. If your contracts involve CUI, you will need resources beyond AffirmReady.
Where to start
AffirmReady is launching soon. To request early access, email support@affirmready.com.
Still need help?
If you are not sure whether AffirmReady is the right fit for your company, we are happy to help. Email our support team at support@affirmready.com and include your company name and the email address on your AffirmReady account. We typically respond within one business day.