CMMC 2.0 · Level 2 · NIST SP 800-171 Rev 2
ARMS
Assessment Readiness Management System
The professional compliance tool for organizations pursuing CMMC 2.0 Level 2 certification. Track all 110 controls, calculate your SPRS score, manage your POA&M, and generate audit-ready reports — in a single secure file.
$39.99 · Perpetual License · No Subscription · Single File App
110 NIST SP 800-171 Controls
SPRS Score Calculator
POA&M Tracker
Evidence Locker
AI Compliance Advisor
CMMC 2.0 Level 2
DFARS 252.204-7019
HTML Export
No Server Required
110 NIST SP 800-171 Controls
SPRS Score Calculator
POA&M Tracker
Evidence Locker
AI Compliance Advisor
CMMC 2.0 Level 2
DFARS 252.204-7019
HTML Export
No Server Required
What's Included
Everything You Need for
CMMC Level 2 Readiness
ARMS is purpose-built for DoD contractors and subcontractors who need to self-assess, document, and report their NIST SP 800-171 compliance posture.
🛡️
Control Assessment
Work through all 110 NIST SP 800-171 Rev 2 controls organized by domain. Set status, add implementation notes, and assign priority for each control.
📊
SPRS Score Calculator
Automatically calculates your Supplier Performance Risk System score in real time. Generates a submission-ready summary for the DoD SPRS portal.
📋
POA&M Tracker
Log remediation tasks with owners, target dates, and priorities. Visual Gantt timeline keeps your remediation schedule on track.
🗄️
Evidence Locker
Catalog policies, screenshots, configurations, audit logs, certs, and scan reports. Tag by domain and control for audit-ready organization.
🤖
AI Compliance Advisor
Ask plain-language questions about any control. Get actionable implementation guidance and audit prep tips powered by Claude AI.
📄
Audit-Ready Reports
Export full HTML compliance reports, POA&M summaries, and SPRS score packages. Professional formatting for C3PAO submissions.
3.1.1Limit system access to authorized users, processes acting on behalf of authorized users, and devicesImplemented
3.1.2Limit system access to the types of transactions and functions that authorized users are permitted to executeImplemented
3.1.3Control the flow of CUI in accordance with approved authorizationsPartial
3.1.4Separate the duties of individuals to reduce the risk of malevolent activityPartial
3.1.5Employ the principle of least privilege, including for specific security functions and privileged accountsNot Started
Full Coverage
All 14 NIST SP 800-171
Practice Domains
Every domain from NIST SP 800-171 Rev 2 is fully covered — 110 controls total, organized and weighted for SPRS scoring.
AC
Access Control
22 controls
AT
Awareness & Training
3 controls
AU
Audit & Accountability
9 controls
CM
Configuration Mgmt
9 controls
IA
Identification & Auth
11 controls
IR
Incident Response
3 controls
MP
Media Protection
9 controls
PS
Personnel Security
2 controls
PE
Physical Protection
6 controls
RA
Risk Assessment
3 controls
CA
Security Assessment
4 controls
SC
System & Comm Protection
16 controls
SI
System & Info Integrity
7 controls