CMMC Level 2 Non-Negotiable Requirements Explained | Huntress
CMMC Level 2 self-assessments now require at least 88 points and every non-waivable NIST 800-171 control.
Huntress explains that CMMC Level 2 self-assessments under 32 CFR 170.21 require a score of at least 88 of 110 and implementation of every three- and five-point NIST SP 800-171 requirement plus specified one-point controls. Those non-negotiable items score 64 points, so contractors choose among remaining one-point requirements to reach 88 in the Supplier Performance Risk System. A conditional status with unmet items starts a 180-day closeout and expires if SPRS is not updated. Huntress says 32 of 55 requirements in its CMMC materials are non-negotiable and that its coverage maps to about 52 percent of possible points.
- Conditional CMMC Level 2 status requires a score of at least 88.
- Every three- and five-point NIST 800-171 requirement must be implemented.
- Open Plan of Action and Milestones items expire after 180 days if not closed.
- Huntress says 32 of 55 mapped requirements are non-negotiable.
- Vendors
- Huntress
- Organizations
- U.S. Department of DefenseNIST
- Countries
- United States
From the original article
3 min read at huntress.comLearn the CMMC Level 2 requirements you can’t skip, the new 88-point minimum score, and how the 180 day POA&M clock affects contract eligibility.
huntress.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.