# Try the workspace | Eagle Ridge Advisory # See what working with us looks like. This is our client workspace, filled in for a made-up machine shop that is halfway to CMMC Level 2. Click anything. Change a control's status and watch the score move. Your changes stay in this browser and are never sent to us. Kestrel CMMC Level 2 readiness * Discovery & scopingDone Aug 21 * Gap assessmentDone Sep 4 * 3RemediationIn progress * 4SSP writingStarted early * 5Pre-assessment reviewStarts Dec 7 * 6Evidence & interview prepStarts Jan 18 * 7Continuous monitoringStarts Mar 15 OverviewRoadmapTeam ## Good morning, Dana. You are in phase 3 of 7: **Remediation**. Your score has moved from -38 to +56 since the gap assessment. SPRS score +56 Up 94 points since Sep 4 Controls met 77/110 33 still open Assessment day 165 days Mar 15, 2027 ### Where you stand To pass, a company needs a score of at least 88, and every open item must be small enough to fix after the assessment. You are at +56. 8 items must be fixed first; 25 can go on a 180-day fix-it plan (a POA&M). Try changing a control's status on the Controls page and watch the score move. About Kestrel 38 people · Dayton, Ohio · CNC machining for aerospace Subcontractor on an Air Force sustainment contract Systems in scope * Microsoft 365 GCC High * One on-site file server * CNC machines on the shop floor (OT) * Part-time outsourced IT from Brightline IT MT Most urgent **3.8.3 Media Sanitization** Old drives and printed CUI have no approved disposal method yet. Brightline is getting a shredding and wipe vendor. Due Nov 13. Open control SPRS score +56/ 110 88 to certify -203110 32 points to go to reach 88, the minimum to certify. This week * Pick a shredding and drive-wipe vendor for CUI mediaLinda Okafor · Oct 7 * Approve the OT network design with Ray and BrightlineDana Whitfield · Oct 6 * Turn on FIPS mode on the file server and test file accessMarcus Tran · Oct 9 * Set up one log view for Microsoft 365, the server and the firewallMarcus Tran · Oct 9 * Send the November tabletop exercise invite to managersChris McConnell · Oct 2 Must close before assessment * **3.3.2** User Accountability−3 * **3.3.5** Audit Correlation−5 * **3.5.3** Multifactor Authentication−3 * **3.7.4** Media Inspection−3 See all open gaps **Want this view for your company?** In a 50-minute call we look at where you stand and what it would take. [Book a call](/discovery) **+56** SPRS[Book a call](/discovery)