CMMC Level 2 Example¶

{
  "aces_version": "0.1",
  "id": "ev_01JNKCMMC001",
  "collected_at": "2026-03-22T00:00:00Z",
  "tenant": {
    "company_id": "msp-acme",
    "client_id": "client-acme-corp"
  },
  "connector": {
    "connector_type_id": "msgraph",
    "last_sync_status": "success"
  },
  "evidence_type": "access_control",
  "description": "MFA enforced for 100% of user accounts",
  "control_mappings": [
    { "framework": "cmmc-level2", "control_id": "AC.2.006" },
    { "framework": "cis-v8",      "control_id": "6.3" }
  ],
  "metrics": [
    { "category": "access_control", "metric_key": "mfa_enrollment_percent", "metric_value": "100.0", "metric_type": "percentage", "unit": "%" },
    { "category": "access_control", "metric_key": "users_with_mfa",         "metric_value": "55",    "metric_type": "count",      "unit": "users" },
    { "category": "access_control", "metric_key": "users_without_mfa",      "metric_value": "0",     "metric_type": "count",      "unit": "users" }
  ],
  "scoring": {
    "sprs_score": 5,
    "sprs_value": 5
  }
}