Conditional vs Final CMMC Status & Validity Windows
Your CMMC status isn't just a label — it has an expiration date and an affirmation cadence. Here's how Conditional and Final differ, and how long each one lasts.
Conditional vs Final at Level 2
A score of 110 is a Final Level 2 self-assessment — every requirement implemented. A score of 88 to 109 is a Conditional self-assessment: you've crossed the 0.8 threshold but still have eligible gaps on a POA&M. Below 88, you can't affirm a Conditional or Final status at all. A Conditional status becomes Final once you close the POA&M via a closeout assessment.
How long each assessment is valid
- Final Level 1 self-assessment — current for 1 year from the assessment date.
- CMMC Level 2 Conditional self-assessment — valid 180 days to close the POA&M.
- CMMC Level 2 Final self-assessment — valid 3 years, with annual affirmations.
- Level 2 (C3PAO) and Level 3 (DIBCAC) — require annual affirmations across a 3-year period.
The annual affirmation cadence
CMMC requires affirming continuing compliance each year, not just once. For certification assessments the Affirm action appears 60 days before each annual expiration. Government personnel only ever see affirmed Conditional and Final statuses — never Incomplete, Pending Affirmation, or No CMMC Status — so a record that lapses or was never affirmed is effectively invisible to a contracting officer. The practical takeaway: a defensible score is something you maintain on a calendar, not a one-time event.
Key takeaways
- 110 = Final · 88–109 = Conditional · below 88 = not eligible.
- Conditional Level 2 is valid 180 days; Final Level 2 is valid 3 years.
- Final Level 1 is valid 1 year.
- Final/certification statuses need annual affirmations; the Affirm window opens 60 days early.
- An expired assessment is invisible to the government.
Know your score before you submit
Run a full 110-requirement self-assessment free — no account required to see your score.
Start free assessmentSources
SentryNexus is a preparation and self-assessment tool. It does not connect to or submit anything to SPRS, and it is informational support only — not legal or compliance certification advice.