Jeremy Neely Text Jeremy

Security & Compliance · Prototype

AME CMMC

AI-assisted CMMC readiness assessments that staff confirm and cite.

Built for: AME staff who assess defense-contractor clients

The framework browser showing a Level 2 requirement and its objectives.
The framework browser showing a Level 2 requirement and its objectives.

The problem

CMMC readiness means reading 110 Level 2 requirements and 320 assessment objectives against a client's security documents. By hand that is days of expert reading per client, and the reasoning trail is easy to lose.

What I built

I built the first stage of an internal platform for assessing defense contractors against CMMC: the database, sign-in, a guide importer and a framework browser. In the full design, AI drafts a status for every objective and an assessor accepts or changes each one.

How it works

  1. Import the official assessment guides as versioned data.
  2. Staff sign in and browse requirements and objectives.
  3. Planned: upload client documents and tag evidence.
  4. Planned: AI drafts findings with cited evidence for review.
  5. Planned: produce readiness, SPRS and proposal reports.

Built with

  • TypeScript
  • Fastify
  • React
  • Vite
  • PostgreSQL 17
  • TanStack Query

More of Jeremy's work