Instant regulatory diagnostic for Defense Industrial Base primes, subcontractors, and federal suppliers. Evaluates supply chain flowdown liability, cloud enclave boundaries, and defensible evidence posture.
Contract tier dictates DFARS flowdown liability, SPRS reporting obligations, and C3PAO assessment timelines.
Direct contractual agreement with DoD commands; holds ultimate accountability for subcontractor flowdown compliance.
Teaming partner or fabricator holding DFARS 7012, 7019, and 7020 clauses; subject to stop-work order risk.
Supplying NASA, DHS, GSA, or civilian agencies subject to FAR 52.204-21 basic cyber hygiene.
Pursuing defense market entry or protecting proprietary dual-use intellectual property from foreign exploitation.
Determines whether NIST SP 800-171 Rev 2 controls (110 requirements) and CMMC Level 2 C3PAO audits apply.
Engineering drawings, technical specs, military ops data, and export-controlled articles. Mandatory CMMC Level 2.
Invoicing, schedules, and administrative contract documentation. Covered by 15 basic FAR controls.
No federal contract markings; focus is on preventing extortion ransomware and AI data leakage.
Cloud infrastructure compliance dictates FedRAMP Moderate/High equivalency status under DFARS 252.204-7012.
Standard cloud tenants without sovereign US-person data boundaries. Incompatible with CUI and ITAR.
Dedicated federal enclave satisfying FedRAMP High equivalency and strict US-person data sovereignty.
Self-hosted physical hardware requiring dedicated perimeter air-gaps, media sanitization, and localized auditing.
Your current posture indicates significant audit disqualification risk under DFARS 252.204-7020 and upcoming CMMC Level 2 requirements.
Please authenticate with your enterprise account to access client portal enclaves.
