Eaglizer ITYour System Security Plan, your POA&M, and your SPRS score. Written from your answers in about 10 minutes.
Most CMMC template packs hand you blank documents and leave the hard part to you. This one asks what you actually have in place, then writes the plan around it, works out your estimated SPRS score, and fills your POA&M with the specific gaps your answers revealed.
See your estimated SPRS score and a preview of your plan free, before you pay anything. Instant download. 14 day refund if it is not what you expected.
Why a blank template pack does not get you there
The plan has to describe your system
Control 3.12.4 requires a system security plan, and an assessor reads it first. A generic plan describing a company that is not yours is the fastest way to fail. This one names your system, your cloud, your sites, and the people who sign it.
The POA&M is the part nobody fills in
Template packs ship an empty POA&M table. Ours arrives populated: every control your answers marked as not in place becomes a numbered entry with a concrete first action, an owner, and a target date weighted by how much it costs you in points.
The score is a number you have to submit
Your SPRS score goes to the government. The worksheet shows the arithmetic control by control, so you can see exactly which gaps are costing you 5 points and which are costing 1.
What you get
- System Security Plan, written around your answers, with your boundary, your roles, and a control by control implementation table.
- SPRS Score Worksheet, with your estimated score, every deduction itemized, and the five point items called out first.
- Plan of Action and Milestones, already filled in with your gaps, sorted so the entries that buy the most score come first.
- CUI Security Policy Manual, covering all fourteen NIST SP 800-171 control families, with the owner and review cadence filled in.
- A START HERE guide, telling you what to do first, what is not finished, and the deadlines that catch people out.
Editable Word files, delivered instantly as a zip. The download link keeps working, so you can regenerate after you fix something and watch the score move.
What this is not
Worth saying plainly, because this is a category where overselling does real damage.
- This is not certification. Only an authorized C3PAO can certify you. Eaglizer IT is not a C3PAO, a Registered Provider Organization, or a law firm.
- This is not a finished plan. The questionnaire covers 44 of the 110 controls in NIST SP 800-171 Rev. 2. The plan marks clearly where narratives still need writing, and tells you to use NIST SP 800-171A to finish them.
- Documents do not implement controls. A policy saying you require multifactor authentication does not switch it on. That is exactly why the POA&M exists.
- Do not submit the estimated score yet. Assess all 110 controls first. The worksheet says so on its own first page.
If you want a document pack that promises compliance, plenty of people will sell you one. This is a starting point that tells you the truth about where you stand.
How it works
1. Answer the questionnaire
About 10 minutes. Your company, the system that handles CUI, who signs, and roughly 30 yes or no questions about what is actually in place today.
2. See your score and preview free
Before paying, you see the document list and the opening of your own System Security Plan, with your details already in it.
3. Pay and download
Stripe checkout, then an instant zip of editable Word files. Nothing is emailed to you days later.
Who this is for
Small and mid sized defense contractors and suppliers who handle Controlled Unclassified Information under DFARS 252.204-7012 and need Level 2 documentation. Machine shops, engineering firms, electronics manufacturers, and the suppliers underneath them. It is built for the company where one person handles IT alongside another job, with or without an outside IT provider.
Pricing
Plan and SPRS Worksheet
- System Security Plan written from your answers
- SPRS score worksheet with every deduction itemized
- START HERE guide
- Editable Word files
Full Documentation Kit
- Everything in the plan package
- POA&M populated with your gaps, sorted by score impact
- CUI Security Policy Manual, all 14 control families
- Regenerate any time as your posture improves
Static CMMC template packs sell from roughly $39 to $299 and leave every blank for you to fill. Consultants who write a System Security Plan for you typically charge several thousand dollars.
Questions
Does this make my company CMMC certified?
No. Certification comes only from an authorized C3PAO assessment. This kit produces the documentation an assessment expects to see, which is a prerequisite and not a substitute. Eaglizer IT is not a C3PAO.
How is this different from a template pack?
A template pack gives you blank documents to fill in. This kit asks about your systems, then writes the plan around your answers, calculates your estimated SPRS score, and fills the POA&M with the specific gaps your answers revealed, each with a suggested first action.
Can I submit the SPRS score from this kit?
Not straight away. It covers 44 of the 110 controls in NIST SP 800-171 Rev. 2, so it is an estimate that shows you where you stand. Assess all 110 controls using NIST SP 800-171A before submitting anything to SPRS.
We use an outside IT provider. Do we still need this?
Usually yes. Your provider can operate the controls, but the plan and the POA&M belong to your company and your senior official signs them. The kit records which controls your provider operates on your behalf.
What if my answers change?
Run the questionnaire again and regenerate. Watching the score move after each fix is the point.
What format are the documents?
Editable Microsoft Word files, delivered instantly as a zip download.
Refunds?
If the kit is not what you expected, email us within 14 days of purchase for a full refund.
See where you actually stand, free
The questionnaire gives you your estimated SPRS score and a preview of your own plan before you decide whether to buy.
Templates, not legal advice. Eaglizer IT is not a C3PAO, a Registered Provider Organization, or a law firm, and does not certify compliance with CMMC or NIST SP 800-171. NIST SP 800-171 Rev. 2, NIST SP 800-171A, DFARS 252.204-7012, and 32 CFR Part 170 are published free by the United States government, and where this kit differs from them, they govern.