Insights & analysis
CMMC, on the record
Timely analysis of the CMMC rollout, SPRS scoring, and what each regulatory move means for small defense contractors.
Conditional CMMC Level 2: can you get certified with open gaps?
Yes — most contractors will certify with some requirements still on a Plan of Action & Milestones. Here is the 88-point minimum, the requirements you can never defer, and the 180-day clock.
Read the analysis →CMMC Phase 2 readiness — a 90-day plan (updated: Phase 2 now suspended pending review)
Phase 1 self-assessment rules have appeared in DoD solicitations since November 2025. DoD suspended the Phase 2 C3PAO requirement on July 13, 2026 pending a 60-day review — the self-assessment and SPRS score requirement is unchanged.
Read the analysis →Your SPRS score is a False Claims Act exposure, not a checkbox
A self-assessed SPRS score is a representation to the government — and the DOJ’s Civil Cyber-Fraud Initiative makes an inaccurate one a False Claims Act risk.
Read the analysis →What a prime actually sees when they check your SPRS score
Primes cannot look your SPRS score up themselves — but they are required to confirm you have a current one. Here is how it shows up on the buyer side.
Read the analysis →Reading is step zero. Your score is step one.
The free Muster Score computes your real SPRS number under the exact DoD methodology — no signup, no CUI, about 5 minutes.
Get your free Muster Score