Resources
Tools and guidance for your security program
Free tools, guides and checklists from our engineers to help you prepare for CMMC, strengthen your defenses and respond when it matters.
Free tool · About 5 minutes
CMMC readiness self-check
Answer 18 plain-language questions and get an estimated readiness score for CMMC Level 1 or Level 2, your likely gaps, and what an assessor will expect to see for each one.
Start the self-check- Covers all 14 NIST SP 800-171 families
- Scores by requirement family
- Downloadable PDF report
Guides & checklists
Practical guidance from our engineers
Free checklist
CMMC Level 2 Readiness Checklist
All 110 NIST SP 800-171 Rev. 2 security requirements, the basis of CMMC Level 2, grouped into the 14 requirement families with tick boxes, so you can review where you stand before a self-assessment or certification assessment.
Get the checklist
Free checklist
CMMC Level 1 Basic Safeguarding Checklist
The 15 basic safeguarding requirements of FAR 52.204-21, quoted exactly, with the matching CMMC Level 1 requirement IDs from 32 CFR part 170, to help you prepare for the annual Level 1 self-assessment and affirmation in SPRS.
Get the checklist
Free guide
DFARS 252.204-7012 Cyber Incident Reporting: Quick Guide
What DFARS 252.204-7012 requires when a cyber incident affects covered defense information: the 72-hour report, the certificate you need, malware submission, 90-day preservation of images, forensic access and subcontractor duties, with a one-page checklist.
Get the guide
Free guide
Writing a System Security Plan: Section-by-Section Guide
A practical walk-through of what a System Security Plan for NIST SP 800-171 and CMMC Level 2 should contain, from system boundary and CUI flows to requirement-by-requirement implementation, inherited controls, the POA&M and ongoing maintenance.
Get the guide
Free checklist
Incident Response: The First 72 Hours Checklist
A phase-by-phase checklist for the first three days after you discover a cyber incident: what to do in the first hour, how to scope and contain, who to notify, and what to put in place before it happens.
Get the checklist
Free checklist
Ransomware Readiness Checklist
A practical checklist for preventing ransomware and recovering if it strikes: backups you can trust, phishing-resistant MFA, reduced exposure, detection, segmentation and a response plan, based on CISA's #StopRansomware Guide.
Get the checklist
Let's talk
Ready to strengthen your security posture?
Talk with a CDT engineer about your mission, your systems and your deadlines. We'll tell you honestly what it takes.