Mockup persona switcherHome for:The product picks the home from the user's role, chosen on the onboarding role-card picker (Gamma e584c14b, Vapi 7f28fb45).
Good morning, Marcus
Program home · Acme Defense Systems · Northbridge C3PAO readiness fieldwork ends in 6 days
GRC manager9 approvals waiting on you · 4 assessor requests open
SPRS score · CMMC Level 2
71of 110Below conditional
≥88 conditional
17 points to Conditional Level 2. Biggest lever: 3.5.3 (−5) via CAPA-024.
Frameworks
Requirements met
CMMC Level 2
NIST SP 800-171 r286 of 110
ISO/IEC 27001
202271 of 93
ISO 9001
201548 of 52
NIST CSF
2.054 of 106
ISO/IEC 20000-1
201822 of 61
Assignment
Vanta a31c2c1c
93%assigned
Assigned296
Unassigned24
Objectives with a named implementor
Implementation statement coverage by family214 approved · 67 unwritten of 320
FamilyOwnerCoverageWrittenApproved
- 3.1Access ControlTOTom49/5941/59
- 3.2Awareness and TrainingSASofia9/99/9Complete
- 3.3Audit and AccountabilityTOTom26/3024/30
- 3.4Configuration ManagementTOTom24/3318/33
- 3.5Identification and AuthenticationTOTom22/2418/24
- 3.6Incident ResponseDWDana14/1414/14Complete
- 3.7MaintenanceTOTom10/148/14
- 3.8Media ProtectionTOTom17/2712/27Reassign?
- 3.9Personnel SecuritySASofia4/44/4Complete
- 3.10Physical ProtectionPNPriya16/1615/16
- 3.11Risk AssessmentMLMarcus8/108/10
- 3.12Security AssessmentMLMarcus11/139/13
- 3.13System and Communications ProtectionDWDana29/4323/43Reassign?
- 3.14System and Information IntegrityTOTom14/2411/24Reassign?
Approved Written, awaiting approval Not written
Implementor workload
Implementor · writtenReviewReturnedOverdue
- TO623Tom Okafor162 of 211
- DW2—1Dana Whitfield43 of 57
- ML———Marcus Lee19 of 23
- PN1——Priya Natarajan16 of 16
- SA———Sofia Alvarez13 of 13
Tom holds 211 of 320 objectives (66%). Consider moving 3.8 or 3.14 before the March certification.
Approvals queue 9
- IMP-0353Due 10-153.5.3MFA for local and network accessTom Okafor · submitted Oct 9 · Shared with BlueRidge Managed IT · 5 sources · all 5 quality prompts answered
- IMP-0414Due 10-173.4.1Baseline configurations and inventoriesTom Okafor · submitted Oct 8 · Cites WI-031 and AST-0108 · missing "When"
- IMP-0305Due 10-163.3.5Correlate audit record review and reportingTom Okafor · submitted Oct 7
- IMP-1002Due 10-143.10.2Protect and monitor the physical facilityPriya Natarajan · submitted Oct 6
- IMP-1307Due 10-123.13.7Prevent split tunneling for remote devicesDana Whitfield · submitted Oct 5
- POL-004Due 10-15Access Control Policy v3.0Dana Whitfield · submitted Oct 3 · §4.3 is cited by 3 implementation statements
- PLN-002Due 10-14System Security Plan v2.4 (boundary update)Tom Okafor · submitted Oct 10 · Answers assessor request REQ-014
- CAPA-024Due 10-13Action plan: enforce MFA on local privileged consoleTom Okafor · submitted Oct 10
- RSK-028Due 10-20Treatment plan: counterfeit electronic partsElena Sorokin · submitted Oct 2
Risk appetite breaches 2
- RSK-0419MediumOpenSole-source machining vendor fails delivery for F-35 bracketSupply chain appetite ≤6 · residual 9 · Elena Sorokin
- RSK-03916CriticalOverduePrivileged admin accounts lack MFA on local console accessCyber appetite ≤8 · residual 16 · Tom Okafor
Assessor requests outstanding 4
Northbridge C3PAO · Rachel Kim
- 3.12.4[b]AcknowledgedUpdated system boundary diagram showing the M365 GCC High tenant and on-prem enclave interconnects.TO Tom · due Oct 14
- 3.5.3[b]With assessorDuo for Windows Logon configuration export for the 4 sampled enclave servers.TO Tom · due Oct 12
- 3.1.12[d]OverdueRemote access session logs (VPN + RDP gateway) for 10 sampled sessions in the last 30 days.TO Tom · due Oct 10
- 3.8.9[a]ReturnedCurrent Atlas Cloud Backup assurance report and key management description.ES Elena · due Oct 13
Upcoming assessments & audits
Oct
17
Northbridge readiness fieldwork ends
Assessment · in 6 days
Nov
3
Production & calibration audit
Internal audit · in 23 days
Nov
16
ISO 9001 recertification
External audit · in 36 days
Jan
18
ISO 27001 surveillance audit
External audit · in 99 days
Mar
8
CMMC L2 C3PAO certification
Assessment · in 148 days