For Defense Contractors

1. Determine your required level -- Review your contracts and solicitations
2. Start with the appropriate checklist -- Level 1 or Level 2
3. Conduct a gap analysis -- Use cmmc-gap-analysis.md to identify where you fall short
4. Create your SSP -- Use ssp-outline.md as your starting framework
5. Document your POA&Ms -- Track remediation with poam-template.md
6. Run the self-check script -- Execute cmmc-l1-self-check.sh on your systems
7. Assess readiness -- Complete the readiness assessment

For IT Service Providers / MSPs

1. Use these checklists to evaluate your DIB clients' compliance posture
2. Reference the Level 2 checklist when building CUI enclaves
3. Use the SSP outline to create documentation for clients
4. Run the self-check script during quarterly reviews

For Compliance Officers

1. Use the gap analysis to benchmark your current NIST 800-171 implementation
2. Create POA&Ms for identified gaps with realistic timelines
3. Use the readiness assessment before scheduling your C3PAO assessment
4. Share Level 1 checklists with business units for quick self-evaluation

---