mactechsolutionsllc.com

Get one NIST SP 800-171 Rev 2 security requirement by number (e.

List NIST SP 800-171 Rev 2 requirements with their DoD Assessment Methodology (SPRS) weights, optionally filtered by control family name or by point weight (5, 3, or 1).

Compute an exact SPRS score per the DoD Assessment Methodology: start at 110 and subtract each unimplemented requirement's Annex A weight (floor −203).

Get the official NIST SP 800-171A assessment objectives for one NIST SP 800-171 Rev 2 requirement - the exact "Determine if.

Map a security control across frameworks: NIST SP 800-171 Rev 2 ↔ NIST SP 800-53 (FedRAMP Moderate) ↔ NIST CSF 2.

Determine which CMMC level (1, 2, or 3) applies to a defense contractor based on the data they handle and the clauses in their contracts, and - separately - which assessment type may actually be designated today.

List all 17 CMMC Level 1 basic safeguarding practices with their FAR 52.

Turn a list of unimplemented NIST SP 800-171 controls into structured Plan of Action & Milestones (POA&M) entries - deficiency description, planned remediation, priority derived from the SPRS weight, and target dates per DoD-aligned governance (90 days for high-priority items, 180 for standard).

Determine whether a contractor can legally be awarded a given contract type, based on the business systems that type requires.

Explain what a FAR or DFARS cybersecurity clause obliges a contractor to do: what triggers it, the concrete duties, the reporting deadlines, what it flows down to subcontractors, and which other clauses come with it.

Work out which assets fall inside a CMMC assessment boundary, and what each category obliges.

Get one NIST SP 800-171 REVISION 3 requirement by its zero-padded number (e.

Explain how NIST SP 800-171 Rev 2 and Rev 3 differ, and what happened to a specific requirement between them.

Search active federal contract opportunities on SAM.

Look up a federal contractor registration in SAM.

Search actual federal contract awards on USAspending.

Get full detail for one federal award from USAspending.

Resolve a federal agency name fragment to its official awarding-agency names (toptier and subtier) as USAspending knows them - use before search_awards or spending_by_category when unsure of the exact agency name.

Resolve an industry description to NAICS codes (or look up what a NAICS code means).

Aggregate federal contract spending by NAICS, PSC, recipient, or awarding agency over a date range, optionally filtered by keywords/NAICS/agency - market sizing in one call ("top contractors in NAICS 541512 last year", "which agencies buy the most cybersecurity").

Search DISA STIG hardening rules across RHEL 8, RHEL 9, Windows 11, Windows Server 2022, and Cisco IOS Router NDM benchmarks - by keyword (matched against rule IDs and titles first, then descriptions), filterable by product, severity (high/medium/low, mapping to CAT I/II/III), category, and automation level.

Get the complete detail for one DISA STIG rule by its SV id (from search_stig): the requirement discussion, the exact check procedure an assessor runs, the fix text, severity, NIST control mapping, and whether it is SCAP-automatable.

List the DISA STIG benchmarks this server covers, with versions, rule counts, and severity breakdowns.

Generate a DISA STIG Viewer checklist (.