Example, read only. A sample company whose own team runs its CMMC program here, reviewed by a credentialed officer and kept current.
Step 5 of 5 · Self assessment
If you filed today: 110 of 110, the Final Level 2 (Self) path; every requirement MET or not applicable, no plan of action needed.
76 of 110 · PE.L2-3.10.2
Protect and monitor the physical facility and support infrastructure for organizational systems.
Anyone with a phone in the building can walk this one. Each photograph was filed as its kind and landed every letter it shows; this requirement closes on photographs alone.
Charlie drafts, your team confirms
Charlie, the gov safe AI guide, drafted this requirement's section of the System Security Plan from the records below and cited the guide. Marcus Hale, Manager, read it and made every finding. Charlie never marks anything MET.
4 questions, each with its method on the record
the physical facility where organizational systems reside is protected
METPhoto from the office walk
The entrance lock or badge reader (Physical control photos)
MET (finding by Marcus Hale, Manager, 2026-03-05): Examined The entrance lock or badge reader (Physical control photos) (captured 2026-03-05): the badge reader on the only door into the engineering area, locked (Marcus Hale, Manager, 2026-03-05).
the support infrastructure for organizational systems is protected
METPhoto from the office walk
The network or server closet lock (Physical control photos)
MET (finding by Marcus Hale, Manager, 2026-03-05): Examined The network or server closet lock (Physical control photos) (captured 2026-03-05): the locked network closet that holds the office firewall and switch (Marcus Hale, Manager, 2026-03-05).
the physical facility where organizational systems reside is monitored
METPhoto from the office walk
The monitored entrance or alarm panel (Physical control photos)
MET (finding by Marcus Hale, Manager, 2026-03-05): Examined The monitored entrance or alarm panel (Physical control photos) (captured 2026-03-05): the alarm panel armed and the camera over the engineering area door recording (Marcus Hale, Manager, 2026-03-05).
the support infrastructure for organizational systems is monitored
METPhoto from the office walk
The monitored entrance or alarm panel (Physical control photos)
MET (finding by Marcus Hale, Manager, 2026-03-05): Examined The monitored entrance or alarm panel (Physical control photos) (captured 2026-03-05): the alarm service watching the network closet door and the power to the rack (Marcus Hale, Manager, 2026-03-05).
CMMC Assessment Guide Level 2, v2.13, PE.L2-3.10.2
A credentialed officer reviews every step before the senior official signs, and the officer never signs. The findings, the records and the signature stay Meridian's own.
IA.L2-3.5.3 Multifactor Authentication →AT.L2-3.2.1 Role-based Risk Awareness →The sessions →The score →
Self assessed and self attested: you score yourself in SPRS on a three year cycle and your senior official affirms it every year. As of September 3, 2026 a class deviation directs contracting officers to remove third party assessment from contracts. The program rule still provides for it, so your solicitation sets the track. Your team builds the same evidence either way.
Your team works all 110 requirements on the platform, a credentialed officer reviews every step, and the record stays true all three years. Start free for 30 days, no credit card, or book a free advisory call if you would rather talk it through first.