The first step in the CMMC Assessment Lifecycle is to decide what Maturity Level certification you should pursue. To do this, we recommend identifying the different types of information in your environment and the systems used in the creation, receipt, storage, processing, and transmission of that information. We created the System and Information Inventory Tool to assist with this process. More details on the tool can be found on our Selecting Your Desired CMMC Maturity Level page.
The System and Information Inventory Tool has been consolidated into our comprehensive FAR and Above and NIST 800-171 Self-Assessment tool, which you can download below.