npx claudepluginhub grcengclub/claude-grc-engineering --plugin cmmc# CMMC Assessment Evaluates organizational readiness for Cybersecurity Maturity Model Certification (CMMC) v2.0. ## Arguments - `$1` - Target CMMC level (required: 1, 2, or 3) - `$2` - Assessment scope (optional: full, gap-analysis, specific-domain) ## CMMC Levels | Level | Name | Description | Requirements | |-------|------|-------------|--------------| | 1 | Foundational | Basic cyber hygiene | Annual self-assessment, 17 practices | | 2 | Advanced | Intermediate cyber hygiene | Triennial 3rd party assessment (C3PAO), 110 practices | | 3 | Expert | Advanced/progressive cybersecurity | ...
/assessAssesses code, designs, or approaches across dimensions like correctness, maintainability, security, performance; rates 0-10 with pros/cons and recommendations.
/assessAssesses a local repo against a wiki's research and market landscape, producing gap analysis, opportunities, and competitive insights.
/assessAssesses HITRUST CSF readiness for specified type (i1, r2, e1) and optional scope, producing readiness score, domain breakdowns, gap analysis, and remediation roadmap.
/assessAssesses CIS Controls v8 compliance for specified Implementation Group (IG1/IG2/IG3), with optional full, gap-analysis, or specific-control scope.
/assessAssesses US ITAR and EAR export controls compliance readiness across 7 controls each plus jurisdiction determination. Supports itar/ear/both scopes and quick/detailed depths.
/assessAssesses IRAP compliance readiness for Australian government cloud services based on ISM and Essential Eight, evaluating maturity levels for specified classification (official, protected, secret).
Evaluates organizational readiness for Cybersecurity Maturity Model Certification (CMMC) v2.0.
$1 - Target CMMC level (required: 1, 2, or 3)$2 - Assessment scope (optional: full, gap-analysis, specific-domain)| Level | Name | Description | Requirements |
|---|---|---|---|
| 1 | Foundational | Basic cyber hygiene | Annual self-assessment, 17 practices |
| 2 | Advanced | Intermediate cyber hygiene | Triennial 3rd party assessment (C3PAO), 110 practices |
| 3 | Expert | Advanced/progressive cybersecurity | Triennial Govt-led assessment, 110+ practices |
Readiness Score: Overall compliance percentage by level
Domain Gaps: Which of the 14 domains need attention
Practice Implementation Status: Per-practice compliance
C3PAO Preparation: Readiness for third-party assessment
Remediation Roadmap: Prioritized action plan
# Full Level 2 assessment for DoD contractor
/cmmc:assess 2 full
# Gap analysis for Level 1 compliance
/cmmc:assess 1 gap-analysis
# Specific domain assessment
/cmmc:assess 2 "Access Control"