CMMC Level 2 · NIST 800-171 · 110 Controls · 14 Domains
Our tools and managed services map directly to CMMC controls — so you know exactly what's covered, what's documented, and what's left.
The challenge
across 14 domains that must be implemented and evidenced
from Access Control to System Integrity — each with unique requirements
by orgs trying to figure out which tools satisfy which controls
Most organizations and MSPs struggle to connect their security stack to specific CMMC controls. Prospector eliminates that guesswork by mapping every service and tool directly to the controls it satisfies.
The mapping
Every CMMC Level 2 domain is addressed through our managed services, security tools, or compliance documentation — tracked in real-time through Compass™.
| CMMC Domain | Controls | Prospector Solution | Coverage |
|---|---|---|---|
| Access Control (AC) | 22 | Unified Console: MS365 Security, Endpoint Protection | Service |
| Audit & Accountability (AU) | 9 | Unified Console: SOC/SIEM, Log Management | Service |
| Configuration Management (CM) | 9 | Unified Console: Endpoint Hardening | Service |
| Identification & Authentication (IA) | 11 | Unified Console: MS365 Identity Monitoring | Service |
| Incident Response (IR) | 3 | IR & Forensics Team, 24/7 SOC | Service |
| Media Protection (MP) | 9 | Full-Stack: Endpoint Encryption | Service |
| Risk Assessment (RA) | 6 | Vulnerability Scanning, Risk Management | Service |
| System & Comms Protection (SC) | 16 | DNS Filtering, Email Security | Service |
| System & Info Integrity (SI) | 7 | Endpoint Protection, Vulnerability Management | Service |
| Security Assessment (CA) | 4 | Compass™ GRC Platform, vCISO | Service + Docs |
| Awareness & Training (AT) | 3 | Security Awareness Training (add-on) | Service |
| Personnel Security (PS) | 2 | Compass™: Policy Templates | Documentation |
| Physical Protection (PE) | 6 | Compass™: Documentation Support | Documentation |
| Planning & Recovery (PL/RE) | 3 | Compass™: SSP Generation, POAMs | Documentation |
Compass™ is the GRC platform that ties everything together. It maps each Prospector service and tool directly to the CMMC controls it satisfies — and tracks your implementation progress in real-time.
Offer CMMC-ready managed services to your clients — with the tools and documentation to prove it.
The Unified Console maps your managed service offerings directly to the CMMC controls they satisfy. Know exactly what you cover — and what gaps remain.
Compass™ generates SSPs, POAMs, and compliance reports for each client — automatically incorporating the services you deliver.
Manage CMMC readiness across all your clients from a single dashboard. Track SPRS scores, implementation status, and audit readiness per tenant.
Your next step
Let us show you exactly how Prospector's solutions cover your CMMC requirements — and where Compass™ fills the gaps.
