The C3PAO Interrogation Guide
A comprehensive resource that demystifies the CMMC 2.0 Level 2 assessment process. Based on the 14 domains and 110 practices of NIST SP 800-171 Rev 2, the guide outlines exactly what Certified Third-Party Assessment Organizations (C3PAOs) look for during your audit — across Interview, Examine, and Test. Use it to prepare evidence, understand auditor expectations, and get your team assessment-ready.
- • General documentation and evidence requirements (SSP, POA&M, diagrams, asset inventory)
- • Domain-by-domain breakdown with assessor focus areas
- • Alignment with the MacTech Codex Accelerator for automated evidence and continuous readiness