Our Products

Tools That Put CMMC Readiness Within Reach

Assessment-ready documentation and a pocket-sized CMMC reference — built by practitioners for small defense contractors.

ZCA Starter Package PocketCMMC App
ZFG CMMC Accelerator

ZCA Starter Package

A complete, integrated CMMC Level 2 documentation package covering all 110 NIST SP 800-171 requirements — built so a small business can document its environment, score itself accurately and walk into an assessment prepared.

Who It’s For

Small defense contractors with a capable IT team (1–3 staff) who understand their environment and can customize compliance documentation independently. You know your systems — you just need the documentation framework, requirement mappings and assessment-ready templates.

Three Platform Variants Included

Every purchase includes complete variants for the most common CUI environments — no generic placeholders.

Microsoft 365 GCC High Google Workspace PreVeil
One-Time Purchase
$1,995
Complete package • instant delivery • all 3 platform variants
Comparable documentation offerings start at $5,000+. The ZCA Starter Package delivers more depth for less.
  • 25 integrated documents and workbooks
  • All 110 requirements mapped
  • 182 evidence artifacts defined
  • Assessor interview preparation guide
Get the Starter Package

Questions first? Talk to ZFG

25
Documents
110
Requirements
182
Evidence Artifacts
3
Platforms
What’s Included

An Integrated System, Not a Folder of Templates

Every document cross-references the same requirements, uses consistent terminology, and is designed to be evaluated together — exactly the way an assessor works.

System Security Plan (SSP)Implementation narratives for all 110 NIST SP 800-171 requirements.
14 Policies & 40+ ProceduresOne policy per control family, with practical procedures for a small IT team.
Evidence Collection Guide182 evidence artifacts mapped to requirements — know what to collect and why.
Mock Assessment WorkbookWalk through the assessment objectives the way an assessor will.
SPRS Scoring WorkbookCalculate your score using the DoD Assessment Methodology point values.
Incident Response PlanA complete incident response plan with four ready-to-use playbooks.
Assessor Interview Prep24 question-and-answer blocks to prepare your staff for assessor interviews.
POA&M & Supporting WorkbooksPlan of Action & Milestones plus the supporting Excel workbooks.
Mobile App

PocketCMMC: CMMC in Your Pocket

All 110 NIST SP 800-171 security requirements explained in plain language — offline, free to explore, with premium features available.

Free Features for Everyone

  • Plain-English breakdowns of every NIST SP 800-171 requirement
  • Assessment objectives — know exactly what assessors look for
  • SPRS scoring reference & FCI vs CUI helper
  • Cost estimator and acronym glossary
  • Fully offline — no connection or login needed once installed

Upgrade to Core for the full 14-family library, evidence guidance, common findings, an Assessment Tracker with live SPRS scoring, a POA&M builder, and Excel/PDF export.

Download on theApp Store GET IT ONGoogle Play
Explore PocketCMMC

Free vs Core

Free

All the essentials — $0
  • All 110 requirements in plain language
  • Assessment objectives for each requirement
  • SPRS scoring reference
  • FCI vs CUI helper
  • Cost estimator & acronym glossary
  • Full offline access

Core

Everything in Free, plus…
  • Full 14 control-family library
  • Evidence guidance & common findings
  • Assessment Tracker with live SPRS scoring
  • Real certifiability checks
  • POA&M builder
  • Export to Excel / PDF

PocketCMMC is a planning and education tool — not an assessment tool, not legal advice, and not a place for CUI. Use it to understand requirements, plan your compliance journey, and track progress, but never store sensitive or controlled information in the app or use it as a substitute for professional advice.

Common Questions

Product FAQs

The ZCA Starter Package includes all three variants — Microsoft 365 GCC High, Google Workspace and PreVeil — in every purchase. Use the one that matches the environment where your CUI lives. If you’re unsure, we can help you decide.
Free templates are typically generic, fragmented and incomplete. The ZCA Starter Package is an integrated system where all 25 documents cross-reference the same requirements, include platform-specific content, and are designed to be evaluated together — exactly how an assessor works.
Most capable IT teams complete their documentation in roughly 4–8 weeks of consistent weekly effort. Your overall timeline depends on how many technical gaps need to be remediated.
No product or consultant can guarantee a specific assessment outcome. The package is designed to maximize your readiness — but your results depend on accurately documenting and actually implementing each requirement in your environment.
Yes. PocketCMMC is free to download on iOS and Android, and the free version covers all 110 requirements in plain language with offline access. Core is an optional in-app upgrade that adds assessment tracking, SPRS scoring, a POA&M builder and export.
No. PocketCMMC is a planning and education tool. Never store CUI or other sensitive or controlled information in the app.

Have Questions About Our Products?

We’re happy to walk you through what’s included and help you decide if it’s the right fit.

Schedule Consultation