CMMC Level 2 Compliance-as-Code Rule Library (NIST SP 800-171 Rev 2 Aligned) — Digital Download
$550.00
The complete rule set for CMMC Level 2 — all 110 requirements across 14 control families, converted into structured, machine-readable JSON. CMMC Level 2 is a direct adoption of NIST SP 800-171 Rev 2, so this is the exact, DoD-aligned control set contractors are assessed against. Instant digital delivery.
Description
CMMC Level 2 applies to defense contractors and subcontractors handling Controlled Unclassified Information (CUI) — and it is a direct, one-to-one adoption of NIST SP 800-171 Rev 2’s 110 security requirements across 14 control families. This isn’t a separate control catalog: it’s the same requirements the DoD verifies contractors against, whether through self-assessment or third-party C3PAO certification.
This rule library converts every requirement into a structured JSON rule, ready to plug into AI coding agents, CI/CD pipelines, or your own compliance workflow — so your systems can be checked against CMMC Level 2 requirements directly, instead of manually cross-referencing regulatory text every time.
What’s included:
– 110 rules — full coverage of every NIST SP 800-171 Rev 2 requirement, the exact control set CMMC Level 2 is built on
– All 14 control families: Access Control, Awareness & Training, Audit & Accountability, Configuration Management, Identification & Authentication, Incident Response, Maintenance, Media Protection, Personnel Security, Physical Protection, Risk Assessment, Security Assessment, System & Communications Protection, System & Information Integrity
– Clean, documented JSON schema with a machine-actionable instruction for every requirement
– Full data provenance traced to the official NIST Cybersecurity and Privacy Reference Tool (CPRT) export
– Plain UTF-8 JSON — no proprietary software or special tools required
– Instant download after purchase
Who this is for: defense contractors and subcontractors preparing for CMMC Level 2 self-assessment or C3PAO third-party certification, MSPs supporting DoD-adjacent clients, and developers who want CMMC Level 2 requirements embedded directly into development or compliance tooling.
License: single-organization internal use, current snapshot. Need resale or redistribution rights? Contact us for a custom license.
This is a reference and automation tool, not a substitute for a formal CMMC Level 2 assessment or certification. First Step Technology LLC also offers CMMC & Compliance Advisory services for organizations needing a full readiness assessment.
