Free Compliance & Cybersecurity Resources for Regulated SMBs
Worksheets and checklists for CMMC and NIST SP 800-171, HIPAA, the FTC Safeguards Rule, and SEC Regulation S-P, built by the Emry Networks security team for defense contractors, healthcare practices, CPA firms, and wealth advisors.
Worksheets & checklists
Every resource is free, ungated, and written by our security team. Use them to find gaps on your own, then bring the results to a risk assessment if you want a second set of eyes.
SPRS Score Worksheet for NIST SP 800-171
Score all 110 NIST SP 800-171 Rev. 2 requirements using the DoD Assessment Methodology point values (5, 3, or 1), from 110 down to the minimum of -203, before you post to SPRS.
Get the worksheet →CMMC Level 2 & CUI Enclave Readiness Checklist
Ten engineering controls defense contractors should verify before a CMMC Level 2 assessment: CUI enclave scoping, FIPS-validated encryption, MFA, SSP and POA&M, incident reporting, and backups.
View the checklist →HIPAA Security Checklist for Dental & Medical Practices
Ten technical safeguards for practices handling ePHI: risk analysis, portal access, phishing-resistant MFA, imaging network segmentation, backups, BAAs, audit logs, and tabletop exercises.
View the checklist →CPA & Tax Firm WISP Checklist
Ten controls tied to IRS Publication 4557 and the FTC Safeguards Rule (16 CFR Part 314): Qualified Individual, MFA, patching, breach-notification readiness, offboarding, encryption, and testing.
View the checklist →RIA SEC Regulation S-P Checklist
Ten controls for wealth advisors and RIAs preparing for the amended SEC Regulation S-P: incident response, 30-day customer notice, 72-hour service-provider notice, MFA, records retention, and disposal.
View the checklist →Get audit ready now
Schedule your compliance readiness assessment with our team today.