Scoping
Start with scope
Use this path when you need to know whether CMMC Level 2 applies, where CUI moves, and what belongs inside the assessment boundary.
Read now
Use now
Download/request
Pick the job you are trying to finish
Each path combines reading, a browser tool, a requestable working asset, and a consulting next step so the hub stays useful without becoming a flat link list.
Assessments
Choose your assessment path
Use this path when you need to decide between self-assessment, C3PAO preparation, package selection, and gap remediation.
Read now
Use now
Download/request
Contracts
Check contract triggers
Use this path when a prime, solicitation, or contract clause raises questions about CMMC status, timing, and flowdown.
Read now
Use now
Download/request
Talk to us
Cloud
Understand cloud and enclave options
Use this path before buying a platform or moving workloads. GCC High and enclave choices should follow CUI flow and boundary decisions.
Read now
Use now
Download/request
Evidence
Build documents and evidence
Use this path when policies, SSP language, POA&M tracking, and evidence organization are now the bottleneck.
Read now
Use now
Download/request
Timeline
Stay ready between assessments
Use this path after the first readiness push, when posture drift, annual affirmation, evidence refresh, and contract changes need a cadence.
Read now
Use now
Download/request
Talk to us
Reference and trust resources
Use these supporting pages when terminology, delivery relationships, or security-program evidence needs clarification.
Reference
CMMC glossary
Plain-English definitions for assessment, contract, scoping, and evidence terms used throughout this site.
Open the CMMC glossaryDelivery
Partner relationships
See how Velocity CMMC works with internal teams, MSPs, cloud providers, and independent assessment organizations.
Review partner relationshipsTrust
ISO 27001 alignment
Understand how ISO 27001 can support governance without being presented as a substitute for CMMC requirements.
Read the ISO 27001 trust noteHow to use the hub
The labels make each next step explicit. Read now for reference pages, Use now for browser tools, Download/request for manual asset requests, and Talk to us for scoped consulting help.
Read now
Guides and decision pages
Use articles when you need to understand obligations, role distinctions, CUI flow, or terminology before asking for help.
Open the CMMC FAQUse now
Interactive tools
Use browser tools when you need a first-pass scoping, readiness, or timeline view without sending information to us.
Open the tools hubDownload/request
Templates and working assets
Request assets when you need a working template matched to your role, contract path, and current CMMC problem.
Open the templates indexTalk to us
Scope call or package selection
Use a scope call when contract language, CUI flow, assessment path, or cloud architecture requires context-specific judgment.
Book a scope callCategory index
Use these crawlable categories to jump into the part of the CMMC buying journey that matches the current decision.
Scoping
CUI flow, asset categories, boundaries, and scope reduction.
Read scoping guidanceAssessments
Self-assessment, C3PAO preparation, readiness reviews, and certification paths.
Compare assessment pathsCloud
GCC High, secure enclaves, FedRAMP, ESP dependencies, and collaboration choices.
Read cloud guidanceContracts
DFARS 252.204-7021 triggers, prime flowdown, timing, and current status obligations.
Request the checklistEvidence
SSP inputs, policy starters, POA&M tracking, evidence logs, and proof previews.
Request the evidence trackerIndustries
Guidance for manufacturers, machine shops, engineering firms, and subcontractors.
Read industry guidanceTimeline
Phase timing, contract milestones, affirmation cadence, and closeout planning.
Use the timeline toolTools
Scoping, readiness, and timeline tools that create a structured first pass.
Open all toolsTemplates
Manual request assets for scoping, readiness, policy, SSP, contracts, and sustainment.
Open templatesAudience
Who it helps
Defense contractors, manufacturers, engineering firms, and subcontractors trying to choose a scope, readiness, documentation, or sustainment next step.
Decision rule
Key takeaway
Start from contract obligations and CUI flow, then choose the article, tool, template, package, or scope call that fits the problem.
Official basis
Official sources reviewed
We review DoD CMMC resources, 32 CFR Part 170, DFARS 252.204-7021, NIST SP 800-171, and Cyber AB role distinctions for public guidance and role clarity.
Next step
Related next step
Official basis
This hub stays grounded in primary program and standards sources without turning every next step into a government-link list.
Turn the hub into a scoped plan
If the next step is still unclear, we can review your contract path, CUI flow, assessment route, and existing evidence to recommend the right package or request asset.