Our commitment is to provide every compliance opportunity for you to comply with the Department of Defense as an approved contractor.
| Compliance Requirement | Purpose | Key Requirements | Applicability |
|---|---|---|---|
| DFARS Clause 252.204-7012 | Protect CUI within contractor systems | NIST SP 800-171 Cyber incident reporting within 72 hours | Right Click is able to assist all DoD contracts involving CUI |
| DFARS Clause 252.204-7019 | Basic assessment of NIST SP 800-171 implementation | Submit a Basic Assessment in SPRS | Right Click is able to assist all DoD contractors |
| DFARS Clause 252.204-7020 | DoD Medium and High assessments of NIST SP 800-171 | Provide access to DoD for assessments | Right Click is able to assist all DoD contractors |
| DFARS Clause 252.204-7021 | Ensure compliance with CMMC requirements | Obtain CMMC certification | Right Click is able to assist all DoD contractors Level 1 & 2 only |
| CMMC 2.0 Level 1 | Basic safeguarding of FCI | Implement 17 basic controls | Right Click is able to assist all DoD contractors handling FCI |
| CMMC 2.0 Level 2 | Advanced protection of CUI | Implement 110 controls aligning with NIST SP 800-171 | Right Click is able to assist all DoD contractors handling CUI |
| CMMC 2.0 Level 3 | Advanced protection of highly sensitive CUI | Implement additional advanced controls beyond NIST SP 800- 171 | Not available at Right Click |
| NIST SP 800-171 | Protect CUI in non- federal systems | Implement 110 security controls across 14 families | Right Click is able to assist all non-federal organizations handling CUI |
| Cyber Incident Reporting | Report cyber incidents to the DoD | Report cyber incidents within 72 hours | Right Click is able to assist all DoD contractors |
| DFARS Clause 252.239-7010 | Requirements for cloud service providers | Meet FedRAMP Moderate baseline, report cyber incidents affecting DoD data | Right Click is able to assist all cloud service providers handling DoD data |
| NISPOM (National Industrial Security Program Operating Manual) | Protect classified information | Implement required security measures for handling classified information | Not available at Right Click |
| PII Protection | Compliance with privacy and security regulations | Implement privacy and security measures as specified by contracts or federal laws | Right Click is able to assist all contractors handling PII |
We can produce Cybersecurity Insurance Compliance documents so you can qualify in full. Here is our guide:
| Contractor Level | Key Requirements | Insurance Coverage | Right Click Services |
|---|---|---|---|
| Small Contractors | Basic cybersecurity controls, compliance with DFARS 252.204-7012, incident response plan | Basic Cyber Liability Insurance | Right Click Offers Full Compliance for Basic Cyber Security Controls – compliance with DFARS 252.204-7012, incident response plan |
| Contractors Handling FCI | CMMC Level 1 certification, compliance with DFARS 252.204- 7019 | Enhanced Cyber Liability Insurance | Right Click Offers Full Compliance for CMMC Level 1 certification, compliance with DFARS 252.204- 7019 |
| Contractors Handling CUI | CMMC Level 2 certification, full implementation of NIST SP 800-171 controls, regular security training | Comprehensive Cyber Liability Insurance | Right Click Offers Full Compliance for CMMC Level 2 certification, full implementation of NIST SP 800-171 controls, regular security training |
| Prime Contractors | CMMC Level 3 certification, advanced cybersecurity measures, regular vulnerability assessments | High-Level Cyber Liability and Errors & Omissions (E&O) Insurance | Right Click Offers Full Compliance for CMMC Level 3 certification, advanced cybersecurity measures, regular vulnerability assessments |
| Subcontractors | Compliance with flow- down requirements, relevant CMMC certification based on work scope | Tailored Cyber Liability Insurance | Right Click Offers Full Compliance with flow- down requirements, relevant CMMC certification based on work scope |
| Cloud Service Providers | Compliance with DFARS 252.239-7010, FedRAMP Moderate or High certification | Specialized Cyber Insurance for Cloud Services | Right Click Offers Full Compliance with DFARS 252.239-7010, FedRAMP Moderate or High certification |
| Contractors Handling Classified Information | Compliance with NISPOM, advanced encryption and access controls | High-Level Cyber Liability and Professional Liability Insurance | Right Click Offers Full Compliance with NISPOM, advanced encryption and access controls |