CMMC Score Methodology Request

[dk96706]

Problem statement
I want to be able to align the CMMC maturity scoring with the CMMC scoring methodology, but the current cmmc-2.0.yaml only allows for the default 100% scoring percentage.

Expected behavior

Use the score method per the scores_meta tab on the attached cmmc-2.0.xlsx. I updated it to show the scoring for each question/ref_id.

cmmc-2.0.xlsx

Thank you!

[dk96706]

Hello - please reach out if you can help with this request. Thank you so much!

[ab-smith]

cc @Mohamed-Hacene to follow-up on this and validate the scoring upgrade recent addition

[Mohamed-Hacene]

Hello @dk96706,

Thanks for your feedback.

At this stage, we already have CMMC questions defined for each requirement based on the Assessment Guide. Replacing them with the maturity scoring system would therefore be a breaking change and could undermine the work already completed by other users.

We need to give some thought to how we can integrate this scoring approach without impacting existing implementations.

In the meantime, I suggest implementing CMMC with your scoring system as a custom framework on your own instance. This would allow you to take full advantage of the tool while we explore a more seamless integration path.

Here are some documents to help you build your CMMC framework:

• cmmc-2.0_new.xlsx: This is the CMMC Excel file to convert into a YAML using the v2 format. Note that the version currently available in our repository is still in v1 format, which is now deprecated.
  https://github.com/user-attachments/files/25040317/cmmc-2.0_new.xlsx

• example_framework.xlsx: An example framework using the v2 format, showing how to properly structure and populate your Excel file.
  https://github.com/intuitem/ciso-assistant-community/blob/main/tools/example_framework.xlsx

• example_questionnaire.xlsx: An example questionnaire in v2 format, demonstrating how to define and organize questions in the Excel file (similar to what you’ve already started).
  https://github.com/intuitem/ciso-assistant-community/blob/main/tools/example_questionnaire.xlsx

• Tooling documentation: You’ll find documentation for the different tools available to help you build a custom framework here:
  https://github.com/intuitem/ciso-assistant-community/tree/main/tools

These resources should give you everything you need to proceed with your custom CMMC implementation.
Don't hesitate to ask if you have questions.