Client Portal
Your SPRS trend, controls, POA&M, evidence pointers, calendar, and documents in one sign-in, with billing and support integrations planned. Our delivery team runs your program from the other side of the same data.
See the portal →Brilliant at the Basics 20
The ten IT and ten OT practices every program should run first, in our independent six-stage sequence with a seven-step maturity ladder. The guides are free at brilliantatthebasics.us, and your level on each practice is recorded in the portal.
The baseline →Continuous Monitoring
One set of technical checks against your Microsoft tenant, reported against CMMC, NIST SP 800-171, and NIST SP 800-53 at once, with coverage stated beside every score.
How it scores →Master Library & Policy Adoption
Policies, procedures, plans, and a shared-responsibility matrix you adopt by reference and tailor only where you differ, so the baseline stays maintained after delivery.
How adoption works →CUIckStart: the managed CUI enclave
CUIckStart is an inDirectIT product that puts CUI into one operated boundary on Microsoft 365 GCC High, with only the named people who handle CUI inside, so the rest of the business stays out of the assessment scope. Enclaves are managed in the client portal, where the new Enclave module is in build.
Explore CUIckStart →The enclave console →cuickstart.com ↗Where each piece stands
Some of these systems are still in build or review, so here is the status of each one.
| System | Status | What that means for you |
|---|---|---|
| Client Portal | Rolling out | Built and running; client sign-in with your managed Microsoft Entra identity is being connected. Clients are onboarded as their engagements start. |
| BATB 20 guidance | Free and public | Every guide, scorecard, and planner at brilliantatthebasics.us is open today and needs no account. |
| BATB 20 in the portal | Rolling out with the portal | Your delivery team records your level on each practice; you see it on your Baseline page. |
| Continuous Monitoring | Pre-release | The engine runs against synthetic tenants while it is hardened. Client tenants are connected once onboarding opens. |
| CUIckStart Enclave module | In build | Enclave records (build stage, named users, licenses, workloads, change requests) are maintained by the delivery team; there is no live telemetry collection from the tenant yet. See the preview. |
| Master Library | First release in independent review | Adoption opens to managed-compliance clients when the release is approved. |
None of it stores your CUI
The portal stores metadata and pointers into your own GCC High environment. Monitoring stores check results, not your files. The library contains no client data, and the baseline is program metadata. We keep it that way because the vendor that runs your compliance program should not become the place your CUI leaks from.
See your program in the portal.
Tell us where your program stands and we will show you the portal with your own scope in mind. Or email rj@indirectit.com directly.
