Free checklist
Incident Response: The First 72 Hours Checklist
A phase-by-phase checklist for the first three days after you discover a cyber incident: what to do in the first hour, how to scope and contain, who to notify, and what to put in place before it happens.
What's inside
- Hour 0–1: stop, assemble the team and preserve evidence
- Hours 1–24: scope, contain, reset credentials and bring in counsel and your insurer
- Hours 24–72: eradication planning, notification obligations and communications
- Preparation items to complete before an incident happens
More resources
Free checklist
CMMC Level 2 Readiness Checklist
All 110 NIST SP 800-171 Rev. 2 security requirements, the basis of CMMC Level 2, grouped into the 14 requirement families with tick boxes, so you can review where you stand before a self-assessment or certification assessment.
Get the checklist
Free checklist
CMMC Level 1 Basic Safeguarding Checklist
The 15 basic safeguarding requirements of FAR 52.204-21, quoted exactly, with the matching CMMC Level 1 requirement IDs from 32 CFR part 170, to help you prepare for the annual Level 1 self-assessment and affirmation in SPRS.
Get the checklist
Free guide
DFARS 252.204-7012 Cyber Incident Reporting: Quick Guide
What DFARS 252.204-7012 requires when a cyber incident affects covered defense information: the 72-hour report, the certificate you need, malware submission, 90-day preservation of images, forensic access and subcontractor duties, with a one-page checklist.
Get the guide