CMMC Level 2 Evidence Checklist

Every evidence item from all 110 NIST SP 800-171 Rev 2 practices, organized by family and ready to print.

This is the checklist version of what’s on every practice page at passmycmmc.com. Go through it before your assessment. For every item you can’t produce evidence for, that’s your gap list.

What's inside
110 practices across all 14 NIST families. 74 have detailed evidence checklists (372 total items). Practices marked HARD are the ones where contractors most commonly stumble.

Three ways to use it:

Hand it to your IT person or MSSP and say “make sure we can show all of this.” Use it as a gap analysis before you engage a C3PAO. Bring a printed copy to assessment day so you know what to pull up next.

Download the Evidence Checklist (PDF)

For the full breakdown on each practice (what the assessor evaluates, SSP examples, common failures, assessor Q&A), visit the practice pages.


More coming

We’re building out more free tools for small contractors prepping for Level 2. If you want to know when new resources drop, subscribe on Substack.