Who is submitting this intake form? *

First

Last

What is your email address? *

Email

Confirm Email

What is the client company name? *

Who is our main point of contact? *

First

Last

What is our main point of contact's phone number?

What is our main point of contact's email address? *

Who is our project sponsor point of contact?

First

Last

What is our project sponsor point of contact's phone number?

What is our project sponsor point of contact's email address?

What framework(s) are we servicing? *

Describe "Other Not Listed" or "Readiness Services" if selected.

Project Delivery Date? *

Does the customer have an expected Kickoff Date? *

Is there a timeline diagrams, illustrations or other files that would be helpful?

Drag & Drop Files, Choose Files to Upload You can upload up to 5 files.

Estimated Client Readiness *

Ongoing Client Readiness
Substantially Ready
Basic Readiness
Wet Puppy

Hosting *

Logistics and Travel *

Single Site Visit
Multi-Site Visit
No Site Visit
Unknown

Describe Site Visit Requirements.

What Portal Access will client have? *

Any Portal Access instructions or important details? *

What risks have been identified to this project?

What are the project deliverables or any other important information?

If Security Testing, the details are:

What is the frequency of the testing?

One Time
Monthly
Quarterly
Other

If other was chosen, what are the requirements?

How many targets if known?

ISO Scoping Specifics

Table of Contents

What is the scope of the ISMS?

Have the boundaries and applicability of the ISMS been determined?

Yes
No

Is the scope of the ISMS documented?

Yes
No

What information does the organization need to protect?

Have the information assets been identified and classified?

Yes
No

What are the external and internal issues relevant to the ISMS?

Have the external and internal issues been identified and considered?

Yes
No

What are the requirements of interested parties?

Have the requirements of customers, suppliers, and other interested parties been identified and addressed?

Yes
No

What are the interfaces and dependencies with other organizations?

Have the interfaces and dependencies with other organizations been identified and managed?

Yes
No

Are there any exclusions (out-of-scope)?

Have any locations, processes, or other relevant headers been excluded from the scope?

Yes
No

CMMC Scoping Specifics

Estimate number of employees:

Describe any third-party relationships where CUI is being shared.

OSC's Commercial and Government Entity (CAGE) code:

If the OSC has a unique identifier (UID) from a previous self-assessment, input the UID:

Has an SSP been created and checked for completeness, accuracy, and consistency that addresses all security requirements of NIST SP 800-171 R2?

Yes
No

Has an Assessment Scope been created in accordance with 32 CFR §170.19(c), “CMMC Level 2 Scoping”?

Yes
No

Has the OSC created a list of evidence, artifacts, and OSC personnel and ESP personnel to be made available during the assessment?

Yes
No

Has the OSC achieved a score of 110 for the internal Self-Assessment?

Yes
No