Conduct CMMC Level 2 Self-Assessment

Create System Security Plan (SSP)

Create Plan of Action & Milestones (POA&M)

Meet with client to discuss shared responsibility matrix and strategy to remediate open POA&M items.