Free guide
DFARS 252.204-7012 Cyber Incident Reporting: Quick Guide
What DFARS 252.204-7012 requires when a cyber incident affects covered defense information: the 72-hour report, the certificate you need, malware submission, 90-day preservation of images, forensic access and subcontractor duties, with a one-page checklist.
What's inside
- When the 72-hour reporting clock applies and where reports go
- The DoD-approved medium assurance certificate you need before an incident
- Malware submission, 90-day preservation and forensic access
- A one-page checklist: before an incident, the first 72 hours, after reporting
More resources
Free checklist
CMMC Level 2 Readiness Checklist
All 110 NIST SP 800-171 Rev. 2 security requirements, the basis of CMMC Level 2, grouped into the 14 requirement families with tick boxes, so you can review where you stand before a self-assessment or certification assessment.
Get the checklist
Free checklist
CMMC Level 1 Basic Safeguarding Checklist
The 15 basic safeguarding requirements of FAR 52.204-21, quoted exactly, with the matching CMMC Level 1 requirement IDs from 32 CFR part 170, to help you prepare for the annual Level 1 self-assessment and affirmation in SPRS.
Get the checklist
Free guide
Writing a System Security Plan: Section-by-Section Guide
A practical walk-through of what a System Security Plan for NIST SP 800-171 and CMMC Level 2 should contain, from system boundary and CUI flows to requirement-by-requirement implementation, inherited controls, the POA&M and ongoing maintenance.
Get the guide