Plain-English CMMC documentation kits for small defense suppliers. Every template maps to a government document number, so you can check our work against the source.
We structure the documents. We don't assess your systems, advise on scores, or guarantee outcomes — your IT resource supplies the technical truth, and you make every compliance decision. Because every claim cites a document number, you're never taking our word for it.
CMMC Level 1 became a live requirement in new DoD solicitations on November 10, 2025. If a prime has sent you a flow-down questionnaire, or you're bidding new work, the self-assessment is already expected — not coming someday.
The 5-tab Excel workbook: all 15 requirements and 58 objectives, crosswalked to FAR, current CMMC IDs, legacy IDs, and NIST 800-171. Tracks MET / NOT MET, evidence, owner, and live readiness.
Everything in the workbook, plus the plain-English policy and procedure templates for all six Level 1 domains — each footer mapped to its FAR paragraph, CMMC ID, and the objectives it satisfies.
The full kit: workbook, all policy and procedure templates, the evidence system, the SPRS submission walkthrough, and the "when the prime asks" response pack. Anchor: DoD estimates this effort at $4,000–6,000.
↳Launching after independent review by a Registered Practitioner. Join the list and you'll be first to know — and first to get launch pricing.
Every CMMC kit — Level 1 and Level 2 — is built to NIST 800-171 Rev 2, the version CMMC assesses against today. All Rev 2 updates are free for one year from your purchase. When Rev 3 is released, it will be an optional paid upgrade, never a forced one.
Each template cites its FAR paragraph, its CMMC ID, and the objectives it satisfies. If we can't map it to a source, it doesn't ship.
The guides were renumbered when 32 CFR Part 170 took effect. Our crosswalk carries both ID systems, so it still makes sense of the older materials you're holding.
A screenshot walk through PIEE and SPRS to the affirmation step — the exact place small shops get lost. Worth the kit price on its own.
Mapped to the version CMMC actually assesses against right now — not a draft, not a future revision.
Each of these is in development and built to the same standard. Join a waitlist and you'll be first in line — nothing here is for sale yet.
The CUI-level jump: the expanded NIST 800-171 Rev 2 control set, System Security Plan, and evidence structure for suppliers handling controlled unclassified information.
For defense suppliers who need the 800-171 self-assessment and a current SPRS score behind their CMMC work. Same lane, same buyer, same rigor.
Plain-English AI acceptable-use, inventory, and vendor-review templates for small businesses — mapped to the NIST AI RMF and ISO 42001, the way we map everything else.
A guided, done-with-you documentation service is coming once our secure intake is in place. We'll draft your documentation to the same standard — and you always supply the technical truth and make every compliance decision. We're building the secure side of this properly before we open it, which is exactly what you'd want from anyone touching your business.
A longer-term, grant-scale initiative to make AI understandable and usable for the people and small organizations that big vendors overlook. It's the research arm behind everything above — and the reason our documentation reads like a teacher wrote it, not a lawyer. Forward-looking work, not a product on the shelf.
Not what you expected? Full refund inside 14 days, no argument.
The one-page crosswalk is yours before you spend a cent. Judge the quality yourself.
Technical review by a Registered Practitioner before launch. Name credited here at release.
Every claim ties to a public government document number. Verify any of it.
All 15 requirements on a single page — mapped to FAR, current and legacy CMMC IDs, and NIST 800-171. It's the fastest way to see what Level 1 actually asks of you. Enter your email and we'll send it, plus launch news for the kits.
Stark Ave provides professionally structured documentation templates for CMMC Level 1 self-assessment. This is not legal advice, cybersecurity consulting, or certification advice. We do not assess systems, advise on scores, or guarantee any assessment outcome. Your IT resource supplies the technical truth; you make every compliance decision and every submission. All templates reference current, publicly available U.S. Government documents by number.