Methodology: How the Defensibility Check Works
Quick answer: The free check is a short, weighted questionnaire—not an official SPRS calculator and not a CMMC assessment. It scores answers about scope, SSP/evidence alignment, scoring integrity, and signature readiness, then places you in a defensibility band with next steps.
What we designed for
- Never require CUI or SSP uploads
- Surface optimism patterns that create signature risk
- Stay fast enough for owners and IT leads to finish
- Point you to deeper guides—not fake certification
Question themes & weights
| Theme | Why it matters | Relative weight |
|---|---|---|
| Scope & CUI paths | Unknown boundaries invent false maturity | High |
| SSP vs. operations | Narrative must match reality | High |
| Evidence for “implemented” | Claims without artifacts fail review | High |
| Scoring integrity | Wrong weights produce fictional totals | High |
| POA&M hygiene | Hidden gaps reappear under scrutiny | Medium |
| Independent challenge | Single-scorer bias is common | Medium |
| Signature courage | The human risk surface | High |
Result bands
Results fall into comparative bands (strong / mixed / weak / critical). Use them to prioritize work—not as pass/fail certification outcomes.
What we never claim
- An official SPRS score
- CMMC Level status or certification
- Legal conclusions under the False Claims Act
- That software alone replaces assessor judgment
Why we ask for contact details
Name and work email unlock your results and let us follow up if you want help interpreting them. SeePrivacy.