Browse All Templates
Pre-built document templates for defense contractors. Ready to customize and deploy. No credential required.
All Templates
System Security Plan (SSP) Template
Complete SSP draft covering all 110 controls. Export to DOCX. After 3 months, one team generated 40 SSPs.
View →Plan of Action and Milestones (POA&M)
Track control gaps with remediation dates. Teams report 60% faster POA&M creation versus manual spreadsheets.
View →Media Protection Policy Template
Handles removable media controls for SC.5 and SC.8. Includes checklist and evidence collection guide.
View →Access Control Policy AC.1 through AC.4
Covers user provisioning, termination, least privilege. Small contractors tell us this saves 12+ hours per contract.
View →Incident Response Plan Template
Detection, analysis, containment, eradication. Includes contact matrix and escalation flowchart. Required for CMMC.
View →Audit Log Review Procedure
Weekly review checklist for AU.6. Reduces auditor findings by identifying gaps before formal assessments.
View →Configuration Management Plan
Baseline configurations, change control procedures, inventory tracking. DFARS 252.204-7012 requires this.
View →Risk Assessment Report Template
System characterization, threat identification, vulnerability analysis, risk determination. Pairs with NIST 800-171 r2.
View →Security Awareness Training Materials
Phishing awareness, role-based training, annual refresher agenda. Includes completion tracking matrix for compliance.
View →Personnel Security Policy Template
Position risk screening, termination procedures, insider threat awareness. Covers the full PS family requirements.
View →Physical Protection Procedures
Badge access, visitor control, server room protection. Many contractors underestimate PE requirements until audit.
View →System and Communications Protection
Boundary protection, encryption standards, DNS filtering. SC.3 and SC.7 are most frequently cited gaps.
View →System and Information Integrity
FIM, malware protection, network performance alerts. SI.3 requires flapping checks. Template includes workflow.
View →Boundary Protection Policy
VLAN segmentation, egress filtering, DMZ configuration documentation. Reviewers say this is the clearest SC.7 guide.
View →Vulnerability Scanning Procedures
Monthly scan checklist, remediation workflow, POA&M updates. Integrates with Nessus, Qualys, and open-source tools.
View →Contingency Planning Template
Backup procedures, disaster recovery plan, alternate sites. Includes 3 sample playbooks for common scenarios.
View →