What the engagement produces
DELIVERABLE 01
Your real SPRS score
Scored against the DoD Assessment Methodology across all 110 NIST SP 800-171 Rev. 2 controls, at the assessment-objective level, the way a C3PAO will score you.
DELIVERABLE 02
CUI boundary documentation
Data-flow mapping and a boundary definition. Every architecture and budget decision depends on this document.
DELIVERABLE 03
Sequenced gap register
Every gap with its point weight, remediation approach, and effort class, ordered so five-point deductions and long-lead items come first.
DELIVERABLE 04
Executive briefing
A short, plain read-out for leadership on the score, exposure, remediation cost class, and certification path.
How it runs
- Fixed scope, typically 4 to 6 weeks. It runs on the Factory runbook as a defined production run, so discovery is never left open-ended.
- Practitioner-led. The people who scored inDirectIT's own environment run yours.
- Feeds directly into remediation. The gap register is written as the input to Factory stations 02 to 04, so nothing has to be rediscovered later.
Path 01
Request your assessment.
Tell us where the program stands and we'll come back with scope, timeline, and a fixed price. A practitioner reviews each request and replies with specifics. Or email rj@indirectit.com directly.