Services / 48-Hour Readiness Snapshot
Start Here · Fixed Fee

Your accurate SPRS score and readiness verdict — in 48 hours

For contractors with a current SSP (System Security Plan) who need to know, quickly and honestly, whether it holds up.
Get My 48-Hour Verdict
48 hours = two business days from the moment your current SSP and documents are in. No SSP yet? The CUI Scope & SPRS Sprint is your starting point.
$4,950
Fixed fee — no hourly meter
48 hours
Two business days from the moment your SSP and documents are in
$1,000 credit
Toward Module B or Gap Analysis within 90 days

You have an SSP. Does it hold up?

Most small contractors carry an SPRS (Supplier Performance Risk System) score that was estimated once, under deadline pressure, and never validated. If that number is wrong, the risk isn’t abstract: a stale or inflated score is False Claims Act exposure every time you affirm it.
The Snapshot answers one question in two business days: does your documentation support the score you're reporting and if not, what would? No remediation project, no six-week study. A score, a verdict, and your next step.

What you get in 48 hours — two business days from your SSP and documents in

Accurate SPRS score

Calculated against the official DoD scoring methodology, with the worksheet showing how every point was earned or lost.

Readiness verdict

A plain-language answer: ready, ready-with-POA&M (your official gap-closure plan), or not yet — and why.

SSP quality assessment

Where your SSP describes your real environment, where it describes wishful thinking, and which sections an assessor would challenge first.

Recommended next step

One specific recommendation — even when that recommendation is "you don’t need to buy anything else."

How 48 hours actually works

1
Gate

Your clock starts here

SOW signed, payment in, and your SSP + document checklist received. The 48 hours starts now — not before, so you’re never billed for waiting.
2
Day 1

Document review and scoring

Your SSP is read line-by-line against the 110 NIST SP 800-171 practices and the DoD scoring methodology.
3
Day 2

Verdict and write-up

Score finalized, verdict written, SSP quality findings documented with the specific sections that need attention.
4
Within 5 business days of delivery

60-minute recorded debrief

A recorded walkthrough of every finding and deliverable — so your team can replay it, and nothing lives only in one person’s head.

What we need from you

This checklist is how your timeline stays protected — the clock starts when it's complete, so nothing stalls mid-engagement.
✓ Your current System Security Plan (the 48-hour clock can’t start without it)
✓ Your most recent SPRS score and the date it was submitted, if one exists
✓ Your contract list with DFARS clauses (plus POA&M and network diagram, if they exist)
✓ One point of contact who can answer clarifying questions within the window

Is the Snapshot the right entry point?

The Snapshot works well for:

  • ✓ Contractors with a current SSP that has never been independently sanity-checked
  • ✓ Teams reporting an SPRS score they can’t fully explain
  • ✓ Owners who need a fast, honest verdict before budgeting remediation
  • ✓ Contractors deciding between self-assessment and C3PAO preparation

Not the right fit:

  • ✗ No SSP yet — start with the 5-day Sprint instead; there’s nothing to snapshot
  • ✗ Scope still undecided — a score against the wrong scope is a wrong score
  • ✗ Organizations wanting Lumos to perform the formal assessment — a C3PAO must do that
  • ✗ Looking for hands-on technical implementation — your IT staff or MSP performs that work
Lumos is a solo practice led by a Cyber AB Registered Practitioner providing readiness advisory and documentation only — formal CMMC assessments are conducted by certified C3PAOs, and technical implementation is performed by your IT staff or MSP. CMMC readiness consulting is generally an allowable cost under FAR 31.205-33; confirm with your contracts team.
CISSP · ISSEP · CCSP · CSSLP · CISA · CISM · PMP Cyber AB Registered Practitioner 28 NIST engagements since 2017 Veteran & Native Hawaiian-Owned

Where this leads

Snapshot clients typically move to the Gap Analysis or straight to Module B (SSP Build) — and $1,000 of the Snapshot fee credits toward either within 90 days.
Sprint Gap Analysis Module A Module B Module C Readiness Review Retainer
Next step: Full Gap Analysis →

Questions about this engagement

What if our SSP turns out to be incomplete? +
Then the engagement converts to the 5-day Sprint and the fee difference ($1,550) is invoiced — stated up front so there are no surprises. You'll know within the first 4 business hours, and nothing you've paid is wasted: the review work carries directly into the Sprint.
Is the score you calculate official? +
The score is calculated using DoD’s official methodology, but submitting it to SPRS is your affirmation, made by your company. What Lumos provides is the worksheet and evidence trail that makes the number defensible if it’s ever questioned.
Why does the 48 hours only start after the checklist? +
Because a fixed 48-hour promise is only honest if the inputs are in hand — starting with your current SSP. 48 hours = two business days from the moment your SSP and documents are in. The checklist is four items, and most clients complete it in a day or two.
What if the verdict is "not ready"? +
Then you’ve learned that for $4,950 instead of learning it from a C3PAO after paying assessment fees. The verdict comes with the specific reasons and the shortest path to fixing them.

Know where you stand two business days after your SSP lands

Get My 48-Hour Verdict
Free 30-minute readiness call first — I'll tell you if this is the wrong starting point. 48 hours = two business days from the moment your current SSP and documents are in.