Haze Gray
ContractsGuidesDirectory
About
Get Expert Help
Haze Gray

Your command center for federal contracting. Free resources and tools for SDVOSB and VOSB businesses.

Standing watch for veteran contractors

Contracts

  • All Opportunities
  • By NAICS Code
  • By State
  • By Agency

Guides

  • SAM.gov Registration
  • VetCert Certification
  • Document Checklist
  • Common Pitfalls

Directory

  • Find Providers
  • Proposal Writers
  • CPAs & Accountants
  • Get Listed

Tools

  • CMMC ComplianceComing Soon
  • AI ToolsComing Soon
Privacy PolicyTerms of Service

© 2026 Haze Gray. All rights reserved.

Official Source Disclaimer: This portal aggregates publicly available information and provides general guidance. For official requirements and current regulations, always refer to SAM.gov, SBA.gov, and Certifications.SBA.gov.

HomeToolsCMMC Compliance
Coming Soon

CMMC Compliance Tools

Tools to help veteran-owned businesses navigate Cybersecurity Maturity Model Certification (CMMC) requirements for DoD contracts.

Under Development

We're building comprehensive CMMC compliance tools to help you prepare for certification. Get notified when these tools launch.

Planned Features

Self-Assessment Checklist
Interactive checklist covering all CMMC 2.0 practices organized by domain and level
Documentation Templates
System Security Plan (SSP), POA&M, and other required documentation templates
Progress Tracker
Track your compliance progress across all 17 domains and 110+ practices
Gap Analysis
Identify gaps between your current state and target CMMC level
What is CMMC?

The Cybersecurity Maturity Model Certification (CMMC) is a framework developed by the Department of Defense to protect sensitive unclassified information (CUI and FCI) shared with contractors.

CMMC 2.0 has three levels:

  • Level 1: Foundational - Basic safeguarding of FCI (17 practices)
  • Level 2: Advanced - Protection of CUI (110 practices, aligned with NIST 800-171)
  • Level 3: Expert - Enhanced protection against APTs (additional practices from NIST 800-172)

Most DoD contracts handling CUI will require Level 2 certification, which will be phased into contracts starting in 2025.

Learn more at DoD CMMC

Need CMMC Help Now?

While our tools are in development, Haze Gray can connect you with CMMC consultants and help you understand your compliance requirements.

Get Expert Help