{"product_id":"defense-contractor-readiness-bundle-1","title":"Defense Contractor Readiness Bundle","description":"\u003cp\u003e\u003cem\u003eOne workstation's first look at NIST SP 800-171 Rev 2.\u003c\/em\u003e\u003c\/p\u003e\n\u003ch3\u003eWhat it is\u003c\/h3\u003e\n\u003cp\u003eRuns twenty-five checks on this computer, the network it is on and the domains you declare, asks your contractor's questions once, and maps everything to NIST SP 800-171 Rev 2 in one report. Nothing is changed.\u003c\/p\u003e\n\u003cp\u003eA subcontractor with controlled information is held to 110 requirements, and the self-assessment is yours to make and affirm. This bundle shows what one workstation looks like against them: its logging and hardening, the controlled data at rest and the doors it could leave through, your domain and e-mail, your equipment and digital assets, and your own answers to the questions no scan can see.\u003c\/p\u003e\n\u003ch3\u003eThe framework\u003c\/h3\u003e\n\u003cp\u003eMapped to NIST SP 800-171 Rev 2 — with FAR 52.204-21 for Level 1. The report maps what the scan observed on this computer, this network and the domains you declare to that framework's expectations and shows where each finding sits. It is a map of findings to the framework, not a ruling on whether you meet it, and it is not a risk analysis; your industry's expectations stand beside the findings, never in place of them.\u003c\/p\u003e\n\u003ch3\u003eWho it is for\u003c\/h3\u003e\n\u003cp\u003eThe small subcontractor to the Department of War (formerly the Department of Defense) that handles Federal Contract Information or Controlled Unclassified Information and is preparing a CMMC Level 1 or Level 2 self-assessment. A prime contractor or a large program is measured across every enclave and flow-down and is the human-delivered engagement's customer; this bundle is one workstation's first look.\u003c\/p\u003e\n\u003cp\u003eA prime contractor or a large program is measured across every enclave, every flow-down and every system that stores, processes or transmits controlled information, with a System Security Plan that covers the whole. That is the work of the human-delivered ThreatVector engagement. This report is still correct about the workstation it ran on and is a useful first look for the person who will write or update that plan.\u003c\/p\u003e\n\u003ch3\u003eWhat runs (25 checks)\u003c\/h3\u003e\n\u003cul\u003e\n\u003cli\u003eWindows Security Health Check (ENDPOINT-01)\u003c\/li\u003e\n\u003cli\u003eRansomware Readiness Check (RANSOM-READY-03)\u003c\/li\u003e\n\u003cli\u003eAccount \u0026amp; Access Review (INSIDER-ACCESS-05)\u003c\/li\u003e\n\u003cli\u003eCredential Hygiene Check (PW-HYGIENE-11)\u003c\/li\u003e\n\u003cli\u003eOut-of-Date Software Scan (EOL-16)\u003c\/li\u003e\n\u003cli\u003eStartup \u0026amp; Persistence Check (PERSIST-24)\u003c\/li\u003e\n\u003cli\u003eWi-Fi \u0026amp; Home Network Check (WIFI-LAN-02)\u003c\/li\u003e\n\u003cli\u003eRouter \u0026amp; Wi-Fi Settings Checklist (ROUTER-22)\u003c\/li\u003e\n\u003cli\u003eEmail Spoofing \u0026amp; BEC Check (BEC-08)\u003c\/li\u003e\n\u003cli\u003eBreach \u0026amp; Identity Exposure Check (BREACH-10)\u003c\/li\u003e\n\u003cli\u003eInsider Risk Self-Assessment (INSIDER-21)\u003c\/li\u003e\n\u003cli\u003eIndustry Readiness Questionnaire (READINESS-91)\u003c\/li\u003e\n\u003cli\u003eInternet Exposure Scan (EXPOSURE-06)\u003c\/li\u003e\n\u003cli\u003eWebsite \u0026amp; Storefront Checkup (STOREFRONT-07)\u003c\/li\u003e\n\u003cli\u003eCertificate \u0026amp; Encryption Check (TLS-09)\u003c\/li\u003e\n\u003cli\u003eDomain \u0026amp; DNS Security Check (DNS-63)\u003c\/li\u003e\n\u003cli\u003eWorkstation Policy \u0026amp; Logging Check (POLICY-79)\u003c\/li\u003e\n\u003cli\u003eRemovable Media \u0026amp; Cloud Sync Check (DATAEXIT-76)\u003c\/li\u003e\n\u003cli\u003eSensitive Data at Rest Check (SENSDATA-78)\u003c\/li\u003e\n\u003cli\u003eOrganizational Breach \u0026amp; Exposure History (ORGHIST-75)\u003c\/li\u003e\n\u003cli\u003eCloud Storage Exposure Check (BUCKET-28)\u003c\/li\u003e\n\u003cli\u003eAI Usage \u0026amp; Shadow-AI Exposure Review (AIUSE-70)\u003c\/li\u003e\n\u003cli\u003eDigital Asset Register \u0026amp; Ownership Check (REGISTER-74)\u003c\/li\u003e\n\u003cli\u003eHardware, Firmware \u0026amp; Removable-Media Check (ASSET-73)\u003c\/li\u003e\n\u003cli\u003eActive Directory Health Check (ADHEALTH-26) — runs only when you give the Windows domain this computer is joined to (leave blank if it is not joined to one)\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cp\u003eOffered separately, never run by this package: Linux Server Hardening Check (SERVER-25): a Linux product the Windows package engine cannot run on this computer; the report offers it.\u003c\/p\u003e\n\u003ch3\u003eBefore it runs: two questions you can say no to\u003c\/h3\u003e\n\u003cul\u003e\n\u003cli\u003eMay the Removable Media \u0026amp; Cloud Sync Check also read which cloud-sync clients are installed on this computer and which of your folders they hold? It never signs in to any account and never reads a file. Optional. Say no and the report records that this check was skipped at your request.\u003c\/li\u003e\n\u003cli\u003eMay the Sensitive Data at Rest Check count files in this computer's profile folders whose contents carry CUI markings or regulated-data patterns? It reports counts only: never a match, a file name or a path. Optional. Say no and the report records that this check was skipped at your request.\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003ch3\u003ePrice\u003c\/h3\u003e\n\u003cp\u003e\u003cstrong\u003e$649 one-time.\u003c\/strong\u003e Run it every 90 days as the Quarterly Defense Contractor Readiness (IND-DEFENSE-Q-83): $799 a year for four runs with a trend line on every check.\u003c\/p\u003e\n\u003ch3\u003eWhat it never does\u003c\/h3\u003e\n\u003cp\u003eIt never changes a setting, installs anything, tries a password or signs in to an account. Where a check reads inside files it reports counts only — never a value, a file name or a path. Nothing is exploited and no credential is guessed. Your own answers are recorded as yours and never upgraded into something the scan observed.\u003c\/p\u003e","brand":"ThreatVector","offers":[{"title":"Default Title","offer_id":53138738577720,"sku":"IND-DEFENSE-83","price":649.0,"currency_code":"USD","in_stock":false}],"url":"https:\/\/cybermafia.store\/products\/defense-contractor-readiness-bundle-1","provider":"ThreatVector","version":"1.0","type":"link"}