DIBFI Docs

Operations & Risk

Manage risk, run recurring compliance tasks, and track remediation with POA&Ms.

Compliance Operations

Keep your CMMC posture current between assessments with a calendar of recurring compliance tasks — scheduled by cadence, completed with a guided checklist, and turned into dated evidence automatically.

POA&M

Track remediation of compliance gaps and risks as a Plan of Action & Milestones — targets, milestones, status, and system scope — and see how open and overdue items shape your SPRS score and posture.

Reviews & Readiness

Request an expert reviewer to validate your evidence, SSP, and scope before a formal C3PAO assessment, receive a readiness score and written findings, and track each review from request to completed report.

Risk Management

Identify, score, treat, and review information-security risks against a 5×5 model, link them to POA&Ms, and track your active risk posture over time.

SSP Builder

Assemble a complete, assessor-ready System Security Plan — organization and system details, boundary, asset inventory, external providers, interconnections, diagrams, and per-control implementation narratives — then preview, print, or export it to PDF.

Compliance Operations

Keep your CMMC posture current between assessments with a calendar of recurring compliance tasks — scheduled by cadence, completed with a guided checklist, and turned into dated evidence automatically.