CMMC Security Management System
The Level 1 Assessment, Evidence & Approval Management
Is a guided, role-based workflow application for organizing and
managing a CMMC Level 1 assessment from setup through review and approval.
Designed for small and midsize organizations that want a simpler way to track assessment scope, assets, requirement results, evidence, remediation, workflow status, and historical changes in one place.
Designed for small and midsize organizations that want a simpler way to track assessment scope, assets, requirement results, evidence, remediation, workflow status, and historical changes in one place.
Product Feature Overview
1 Guided CMMC Level 1 Workflow
Step-by-step assessment flow: Assessment Setup, Asset Scope, 15 Level 1 questions, Evidence Locker, Remediation, and Results. Users can save progress and return to an in-progress assessment.
2 Assessment Scope & Asset Register
Define the systems and assets included in each assessment. Asset records are kept assessment-specific so users work with the correct scope rather than a shared operational list.
3 Level 1 Requirement Assessment
Capture results for the 15 CMMC Level 1 requirements within the selected assessment. The application supports structured entry and clear navigation through the question set.
4 Evidence Locker
Organize supporting evidence with the assessment and applicable requirement. Evidence management is integrated into the workflow rather than maintained in disconnected folders or spreadsheets.
5 Review & Approval Workflow
Four standard roles - Admin, Entry, Reviewer, and Approver - support separation of duties. Review and approval activities follow permissions instead of hard-coded screen behavior.
6 Permission-Based Security
Role bundles control capabilities such as asset editing, requirement entry, evidence upload, review, approval, reporting, reference-data maintenance, user management, and system administration.
7 Effective-Dated History
Core and reference records use Begin Date / End Date history instead of destructive deletion. Changes can be retained over time to support traceability and historical review.
8 Simplified Administration
Administrative and maintenance functions are limited by permission. Unauthorized users are prevented from accessing protected routes, and reference/master data is kept out of operational workflows.
|
|