CMMC Level 2 POA&M Template
Free Download
A working Plan of Action & Milestones tracker for CMMC Level 2. Unique tracking IDs per finding, SPRS scoring columns, all 14 NIST 800-171 control families, and planned vs actual milestone dates. Drop it in, fill it out, take it to your assessor.
What's in the file
Four sheets. Built to be useful on the first day you open it, not after a week of setup.
POA&M Tracker
Main worksheet. One row per finding, with unique tracking IDs, control family / control ID, finding description, risk level, status, owner, resources required, planned milestones, and planned vs actual dates. Dropdown validation on Status, Risk Level, and SPRS Point Value.
SPRS Summary
Auto-calculated score sheet. Starts at 110 and subtracts SPRS point values for any open or partially implemented control. Shows your current SPRS score in real time as you update the tracker.
Control Reference
All 110 NIST SP 800-171 Rev 2 security requirements grouped by the 14 control families (AC, AT, AU, CM, IA, IR, MA, MP, PS, PE, RA, CA, SC, SI). Brief functional descriptors with pointers to the free NIST publication for full text.
Read Me
Usage notes, column reference, and license terms. Free for any organization to use, internally and with clients.