Resources · Checklist & Templates
The questions to ask, the boxes to check, and ready-to-use templates — distilled from work we do with clients every week.
A practical CMMC 2.0 readiness checklist for defense contractors — the levels, scoping steps, and a family-by-family walkthrough of the NIST SP 800-171 controls behind Level 2. Read online or download the PDF.
The questions that separate a real security operation from a ticket-forwarding service — including the ones vendors hope you won't ask.
Read articleMapping common underwriter requirements — MFA, EDR, monitoring, IR planning — to a pragmatic order of operations.
Read articleA CMMC 2.0 readiness checklist for defense contractors: the levels, how to scope FCI/CUI, and a family-by-family walkthrough of the NIST SP 800-171 controls behind Level 2. The PDF companion to our online checklist.
SHA-256
74bb8373fa157a7df61178f63021c3ecc0c1a1675b3f46e29c968a2189711df7A fill-in-the-blanks IR plan: severity matrix, roles and 24/7 contacts, phase-by-phase checklists, a notification obligations table to complete with counsel, communication templates, and a blameless post-incident review agenda.
SHA-256
5931c3b8f3f50730dea5126d9d2dde90ac2b005d797c721d50cd91a2bca16db8These tools apply conservative defaults, but every environment is different — read the script, run report-only mode first, and test before production. Want a reviewed, managed rollout instead? Talk to us.
Book a consultation and we'll assess your current state against the same criteria — and leave you with a written findings brief.