CMMC Template Packs
Template packs
Start with the Suite, or start smaller
The Suite is the documentation system: an SSP with every requirement and objective, the policies and procedures it references, and the records that prove they operate. The packs below are self-contained pieces of that system, sold on their own.
We do not sell individual policies, procedures or the SSP on its own. Those artifacts cross-reference each other by artifact ID, and one of them alone is a document that points at files you do not have. Every pack here is a unit of work that stands up by itself.
The Suite
One-time purchase. 12 months of versioned updates. Sold through Gumroad as merchant of record.
Packs
Run the program day to day: scope it, split provider responsibility, track the POA&M, log exceptions, assess vendors.
5 files CMO-WBK-AI-001, CMO-WBK-SRM-001, CMO-WBK-POAM-001, CMO-WBK-EXC-001, CMO-WBK-VRA-001
Already own the Suite? You already have all 5 of these files. This pack is a packaging convenience, not new material.
Govern AI use in a CUI environment, including on Macs, with paper an assessor can read.
4 files CMO-SPC-AIG-001, CMO-SPC-AIG-002, CMO-SPC-AIG-003, CMO-WBK-AIT-001
Included in the Complete edition of the Suite.
Buying the Suite as well? Core $299 plus this pack is $498 for 54 of Complete's 62 deliverables. Complete is $399 and carries all 62. If you want the documentation set too, Complete is the cheaper route to more of it.
What is in what
| Pack | Files | In the Suite | Price |
|---|---|---|---|
| People and Agreements Pack | 8 | Both editions | Planned |
| Records Pack | 5 | Both editions | $99 |
| FIPS Validation Strategy | 1 | Complete only | Planned |
| Assessment Readiness Pack | 3 | Complete only | Planned |
| Mac Overlay | 5 | Both editions | Planned |
| AI Governance Pack | 4 | Complete only | $199 |
Planned packs carry no public price until their archive is built and verified. A price is a promise that something exists to buy.
Free
The pre-assessment workbook tells you your SPRS score before you spend anything, and a complete filled-in Access Control policy shows you the writing quality. Neither needs a signup.