HOME / PRODUCTS

Security tools, templates and automations, built by an assessor.

The documents, dashboards and workflows we use on real engagements, packaged so your team can use them too.

Your data stays with you. We don't host it, see it or hold it.
System Security Plan document from the CMMC Compliance Engine Healthcare security dashboard with sample data Supplier risk dashboard with demo data
01 // CMMC COMPLIANCE ENGINE

Every document your NIST SP 800-171 assessment needs, ready to fill in.

Visit cmmccomplianceengine.com

Built from an assessor's playbook for defense contractors who want to prepare in-house. Includes a crosswalk to the newer Revision 3 standard.

  • ✓Policies
  • ✓Procedures
  • ✓Agreements
  • ✓System Security Plan
  • ✓Implementation roadmap
  • ✓Compliance calendar
  • ✓Assessment prep questions
  • ✓Revision 3 crosswalk
320objectives in the roadmap
82calendar activities
600+practice questions
Preview of a System Security Plan document
STARTERPolicies, SSP and workbooksFor organizations starting CMMC Level 2: domain policies, a System Security Plan, agreements, self-assessment workbooks and a roadmap. 48 files.Request a quote →
PROFESSIONALStep-by-step proceduresFor teams in the middle of implementation: everything in Starter plus 50+ per-control procedures, incident response playbooks and Microsoft 365 guides. 155 files.Request a quote →
COMPLETEThe whole libraryFor organizations and consultants who want full depth: everything in Professional plus assessment prep packages and 52 automation scripts. 226 files.Request a quote →
02 // SELF-HOSTED DASHBOARDS · COMING SOON

Dashboards that live inside your walls.

Join the early list
Healthcare security dashboard showing findings, milestones and a hard deadline for a sample organization

Healthcare security dashboard

  • ✓Findings, fixes, deadlines and decisions in one view
  • ✓Progress by phase that leadership can read
  • ✓Quick wins and decisions waiting on sign-off
Sample data shown.
Supplier risk dashboard with charts of supplier status and a searchable supplier registry

Supplier risk dashboard

  • ✓Every supplier's status and open gaps in one place
  • ✓Alerts for commitments expiring within 90 days
  • ✓Load a spreadsheet and go; export to Excel or PowerPoint
Demo data shown.
03 // AUTOMATIONS

We build custom compliance automations.

Workflows that do the tedious parts, so your people can do the parts that need a person.

  • ✓Watch regulatory and industry sources and summarize what changed
  • ✓Track evidence deadlines and remind the right person
  • ✓Draft first versions of recurring reports
FEDERAL REGISTER DOD CIO HHS OCR + 30 MORE SOURCES Workflow RUNS ON A SCHEDULE 3 CHANGES A short summary in your inbox
04 // THE REST OF THE TOOLBOX

Smaller tools, same assessor's eye.

Evidence collection tools

Gather the settings and records an assessment asks for, in one pass, saved to a folder you control.

Step-by-step setup guides

Plain-language instructions for Microsoft 365 GCC High, Intune, Purview and locking down network traffic.

Supplier review kit

The questions, scoring rubric and procedure, for companies that want to run supplier reviews themselves.

We built these because we got tired of doing it by hand. You can skip that part.

// READY WHEN YOU ARE

Is your security posture keeping you up at night?

Thirty minutes, no slide deck. Tell us what you're up against and we'll tell you honestly whether we can help.

Book a discovery call jil@wrightbrainedsecurity.com