CMMC 2.0 & Cyber Insurance Readiness Checklist for Alaska Contractors
Essential technical controls required for DoD subcontractors, 8(a) ANCs, and strict cyber liability insurance policies.
- 15-Min Remote Triage
- Anchorage, Mat-Su & Statewide
- Security-First Architecture
Field-Tested Alaska IT Checklist
Whether you are bidding on military base work near JBER, Eielson, or Fort Wainwright, or renewing your cyber liability insurance policy, underwriters and auditors verify these core technical controls first.
1. Access Control & Identity (AC / IA)
Enforce phishing-resistant MFA on all users
Require MFA across cloud email, VPNs, and administrative consoles without exception.
Separate privileged admin accounts from daily email accounts
IT admins must never open email or browse the web while logged into a Global or Domain Admin account.
Block legacy authentication & foreign geo-logins
Use Conditional Access policies to block logins from outside the US unless explicitly approved for travel.
2. Endpoint, Encryption & Audit Logging (SC / SI / AU)
Enforce full-disk encryption (BitLocker / FileVault)
Escrow recovery keys centrally in Intune or MDM and verify compliance across 100% of laptops.
Deploy monitored EDR (Endpoint Detection & Response)
Replace basic antivirus with behavioral EDR capable of isolating compromised hosts automatically.
Retain centralized cloud and firewall audit logs
Ensure Microsoft 365 unified audit logging and firewall security logs are retained for forensic review.
3. Incident Response & Documentation (IR / CA)
Maintain a written System Security Plan (SSP)
Document network boundaries, hardware inventories, and security policies in a living SSP.
Maintain immutable, air-gapped or locked backups
Ensure ransomware cannot encrypt or delete backup snapshots even if an admin credential is stolen.
Tip: You can use your browser's Print function (Cmd+P or Ctrl+P) to save or print this page as a clean PDF checklist.
No Lock-InNeed professional help implementing this setup?
We help local Alaska businesses configure, lock down, and audit their entire IT setups. Connect with us today.
On-site in Anchorage, Wasilla, Palmer & Eagle River • Remote & fly-in support statewide
Estimate Monthly IT Cost
Compare Managed IT, Co-Managed IT, and HIPAA/CMMC compliance vs. in-house staff.
Switching IT Providers?
Locked out of admin credentials or tired of slow tickets? See our 14-day takeover playbook.
Outage or Security Incident?
Immediate Alaska remote & on-site triage for ISP cuts, hacked M365, or server failures.