Security Built for a Purpose.
Use the checkup to list what needs attention, or go straight to a guide for MFA, backups or updates. The guidance focuses on Microsoft 365 and Windows for small IT teams.
No account. No uploads. Your answers stay in this browser tab.
See a sample action plan before you start →Free / CMMC & CUI resources
Work through all 14 domains, covering 110 requirements and 320 assessment objectives. Find Microsoft 365, Windows and Azure Virtual Desktop guidance, with free Excel worksheets, editable Word materials and practical exercises for small defense contractors.
01 / Identify your information
Check whether your company handles controlled unclassified information (CUI). Review customer instructions, markings and where information goes, then use the log to record unanswered questions.
Start with CUI identification →02 / Review gaps and next actions
Use the worksheet to review 110 requirements and 320 assessment objectives. Note where your evidence is stored, what still needs work and who will do it.
Get the free CMMC Level 2 Excel worksheet →Choose the instructions for your commercial or government cloud, then follow the AD DS, hybrid joined or Microsoft Entra joined path that fits your environment.
Find guides for your Microsoft setup →Read which contract duties still apply and what to check in your own organization after reading the DOJ cases.
Read CUI Enforcement & Lessons Learned →Download the worksheets and keep your completed copies in an approved location. No site account or upload is needed. The resources help you review your own systems; they do not provide certification or an official assessment.
New / Security Decision Lab
Your inbox fills with spam. Someone offers to fix it. Make the decisions in a fictional scenario and take away a staff reminder.
$0 Security Sprint
Verify support contacts, plan a file recovery check or inspect MFA enforcement. Start with what you have and leave with a private task card.
Starting steps need no additional software purchase. Time, storage and provider support may still cost money.
Start with settings, worksheets and checks your team can maintain.
No organization name, passwords, or tenant access required.
Your answers guide the plan; the checkup does not inspect your systems.
Guides and references
01 / Guides
Follow steps for access, backups and updates, with worksheets and ways to check your result.
Find a guide ↗02 / References
Read framework summaries and see how the checkup uses NIST CSF 2.0 categories.
Explore frameworks ↗03 / Lookup
Find NVD records for a CVE or public product name when you need technical details.
Browse vulnerabilities ↗Want a worksheet to use today? Browse free security tools and templates →
Unsure about a setting?
The checkup includes those answers in your list of things to verify.