Compliance, Ethics and Cybersecurity

Lessons

1. Basic safeguarding of federal contract information

   Foundation12 min
   Available
   • Recognise the first basic safeguarding requirement.
   • Apply it to accounts on your own systems.
2. Defense contracts: the 72-hour cyber incident clock

   Practitioner10 min
   Available
   • Know what "rapidly report" means under the DFARS safeguarding clause.
   • Build an incident runbook around it.
3. CMMC: levels, assessments and timing

   Practitioner20 min
   Available
   • Know which level a contract requires.
   • Plan a self-assessment or third-party assessment.
4. NIST SP 800-171 in practice

   Professional30 min
   Available
   • Map safeguarding requirements to the systems and people that handle the information.
   • Know the role of the system security plan in a DoD assessment.
5. Representations and certifications: what you are signing

   Foundation15 min
   Available
   • Read your SAM representations before you certify.
   • Update them when facts change.
6. Supply chain rules: covered telecommunications and sourcing

   Practitioner15 min
   Available
   • Know what equipment you may not provide or use.
   • Answer the related representations correctly.
7. Export controls basics for government contractors

   Practitioner15 min
   Available
   • Recognise controlled technical data.
   • Know when to get specialist advice.