Four worksheets your team fills in

Where our CUI lives, DoD's Rev 3 settings, questions for your IT provider, and a budget and timeline planner. Each one hands a decision you make to the people who carry it out.

Built for the person who signs

You won't learn to configure a firewall. You'll learn what your SPRS affirmation says about you, how big your scope should be, and what to fund first.

Ready for Rev 3 before it arrives

Rev 2 is what's enforced today. You'll see what Rev 3 changes, the settings DoD has already picked, and which ones change how you run the business, not just IT.

About the course

If your company handles Controlled Unclassified Information for the Department of Defense, protecting it is already in your contracts. This course explains that obligation in plain language, where CMMC stands after the July 2026 pause, and what changes when NIST SP 800-171 moves from Revision 2 to Revision 3. You follow five made-up defense contractors through the same decisions you face. Every module ends with a handoff for your team, and the last one pulls their answers into a one-page plan for your leadership team. It's written for owners, presidents, CFOs and operations leads at small and mid-sized defense contractors. No technical background is needed.

Jil Wright, instructor

Jil Wright

Jil Wright is the president of Wrightbrained Security. She works as a vCISO and a Lead CMMC Certified Assessor, and holds the CISM, CCA and LCCA certifications. She spends her days checking whether defense contractors really do what they say they do, and she wrote this course for the leaders who have to answer for it.

Curriculum

    1. (Included in full purchase)
    2. (Included in full purchase)
    1. (Included in full purchase)
    2. (Included in full purchase)
    3. (Included in full purchase)
    1. (Included in full purchase)
    2. (Included in full purchase)
    3. (Included in full purchase)
    1. (Included in full purchase)
    2. (Included in full purchase)
    3. (Included in full purchase)
    1. (Included in full purchase)
    2. (Included in full purchase)
    3. (Included in full purchase)
    1. (Included in full purchase)
    2. (Included in full purchase)
    3. (Included in full purchase)
    1. (Included in full purchase)
    2. (Included in full purchase)
    3. (Included in full purchase)
    1. (Included in full purchase)
    2. (Included in full purchase)
    3. (Included in full purchase)
    1. (Included in full purchase)
    2. (Included in full purchase)
    3. (Included in full purchase)
    1. (Included in full purchase)
    2. (Included in full purchase)
    3. (Included in full purchase)
    1. (Included in full purchase)
    2. (Included in full purchase)
    3. (Included in full purchase)
Four worksheets. One plan.

Common questions

Do I need a technical background?

No. The course is written for executives and explains the rules in plain language. The worksheets hand the technical work to the people who do it. It isn't legal advice, and your contracts and your attorney have the final word.

Does it count for CPE credit?

You get a certificate for 5.5 hours of training that you can submit for CPE credit. We can't promise that any certification body will accept it. Each one, including ISC2 and ISACA, sets its own rules, so check with yours first.

Can I train my leadership team?

Yes. For three or more people at the same company, email [email protected] and we'll set them up and send you an invoice. A 3-seat pack is $895. You can also add a 1-hour Q&A call with Jil for $150 by checking the box at checkout.

Ready to hand your team a plan?

Start with the 90-minute Fast Path, or work through all 11 modules at your own pace. Finish every lesson and pass the final quiz to earn a certificate for 5.5 hours of training. Want time with Jil on your own situation? Check the box at checkout to add a 1-hour Q&A call for $150. Training three or more people? Email [email protected] and we'll invoice you.