Interactive Tool — 7 Minutes — Free

Are You CMMC Level 2
Ready?

14 questions. All 14 CMMC L2 control domains. Know your SPRS gaps before DoD does. Enforcement starts November 2026 — no contract without a passing score.

Question 1 of 14
0
/ 140
—
—
⚠ Your Three Biggest Gaps
Domain Scorecard
Get the full $2,500 CMMC gap assessment free →
Where should we send your scored report?
We'll email a formatted PDF of your CMMC readiness score and gap analysis — plus copy john@corerecon.com so you can book a free consultation.
↺ Retake the quiz
⏱ Enforcement Deadline
—
Days Until Nov 1, 2026
CMMC Level 2 enforcement starts. DoD will not award new contracts to organizations that cannot demonstrate compliance.
⚠ DIB Threat Reality
48% of Small DIB Firms
Have suffered a cyber incident in the past 24 months. Only 23% had NIST 800-171 controls fully implemented. (NDIA 2024)
CUI Exfiltration Rate
287-day avg dwell time before CUI theft is detected on DIB networks. Average cost: $9.4M per incident. (IBM CODB 2024)
SPRS Score Visibility
DoD contracting officers can view your SPRS score during source selection. A negative score (<110) flags your bid for added scrutiny.
Score Guide (out of 140)
106–140 Likely Ready
61–105 Gaps to Close
0–60 Significant Remediation
Defense Contractors — CMMC + SDVOSB
See how CoreRecon covers every CMMC domain — and why SDVOSB certification matters to your prime.
SPRS posture, POA&M management, SSP authoring, and 30-min IR SLA. Built for the Texas defense industrial base.
Defense Contractor Vertical →

Scoring based on CMMC Level 2 / NIST SP 800-171 Rev 2 — 14 control domains, 10 pts each (max 140). Results are indicative; not a formal C3PAO or third-party assessment.

SPRS scores range from −203 to +110. A score above 110 indicates all 110 NIST 800-171 practices implemented. For a formal CMMC gap assessment, contact john@corerecon.com or call (800) 955-2596.

CoreRecon · Free Assessment · Defense Contractors · CMMC Guide