Skip to content
ControlVerdict
CMMC Level 2 is the current focus

Where the community decides what sits above the line — and what sits below it.

A repository of sanitized implementation patterns — mapped to assessment objectives and rated by people who make adequacy calls. One example rarely covers a whole practice; you assemble the pieces. Every verdict carries written justification, because the reasoning is the part you need.

Controls
110
Assessment objectives
320
Published examples
110
Verdicts cast
28

Implementing a control?

Find patterns that need more eyes, or publish the one you actually used.

Needs more eyes

Assessing implementations?

See where the community disagrees, then read how verdicts work.

Contested examples

Reading is open. Contributing needs an account.

Anyone can read controls, examples, verdicts and discussion. Posting an example, casting a verdict, or replying requires a signed-in account — that is how attribution and abuse controls work. Start with the quick tour, or sign in with an email link.

Recent examples

All examples

Active discussion

Forum