Skip to content
CMMC Guidance

Specimen. Northfield Precision Works is a fictional 80-person machining supplier and does not exist. Every figure below is illustrative, and nothing here is a client’s data or a promised outcome.

Back to the Method

SPRS submission package

Northfield Precision Works

Period
Weeks 5–8
Context
Stage 03 of four

SPRS score at submission

110 / 110

+238 from intake

Submitted in month 10. Every requirement is implemented and evidenced, so the plan of action closes empty — a score of 110 with nothing carried forward, rather than a high number resting on open items.

At intake
-128
Recovered
238 points
POA&M open
0

What was handed over

91 pages
System Security Plan
One plan covering the enclave, written from the assessed configuration rather than from a template.
68 pp
Plan of action and milestones
Every requirement that was not met at assessment, with an owner, a date, and the points it returns.
9 pp
Scoring worksheet
The score computed requirement by requirement, showing the evidence behind each one.
14 pp

How the score moved

+238 total

Sequenced by points recovered per unit of work, not by whichever gap was easiest to close. The enclave came first because it removed whole families from the assessed estate.

  1. Months 1–2Enclave stood up and CUI moved into it+46
  2. Months 3–5MFA, baselines, and centralised logging+84
  3. Months 6–8Media handling, physical controls, and maintenance supervision+62
  4. Months 9–10Assessment, incident response exercise, and documentation+46

Prepared by The CMMCg Method, stage 03. No engineer is named on a specimen. On a real engagement this is signed by the engineer who did the work, and it is the same person who answers the phone afterward.

The score is computed before submission, not after.

A number reconciled against the methodology in advance is a number the senior official signing the affirmation can actually defend. Reconciling afterward is how suppliers discover a mistake from a contracting officer.

Talk to an engineer