📋 Habit 1
The Master List
Know who and what belongs on your systems
- ✓Every employee has their own unique login — no shared accounts
- ✓Every company device is listed by serial number
- ✓Update the list the same day someone joins or leaves
- ✓Only company-owned devices connect to work systems
🌐 Habit 2
The Secure Network
Control what comes in and out of your internet connection
- ✓Router security features turned on
- ✓Separate internet connections for staff and guests
- ✓Computer built-in protection active on all devices
- ✓No open or unprotected internet connections
🔐 Habit 3
One Person, One Login
Verify who accesses your systems every single time
- ✓Strong, unique password for every employee
- ✓Two-step login turned on for all online accounts
- ✓Computer locks automatically when left idle
- ✓Default router passwords changed immediately
🔄 Habit 4
The Weekly Routine
Keep every device safe, current, and protected
- ✓Automatic updates turned on for all devices
- ✓Weekly scheduled security scan on all computers
- ✓Router checked monthly for software updates
- ✓Maintenance log kept to show the routine is followed
🔒 Habit 5
Lock, Log, Wipe
Protect the physical space and dispose of devices safely
- ✓Work areas locked when unoccupied
- ✓Visitor sign-in sheet used for every non-employee visit
- ✓Network equipment secured in a locked location
- ✓Devices wiped or destroyed before disposal
The full 15-requirement breakdown is inside your compliance package.
These five habits are the framework. The paid workbook maps every habit to the specific DoD requirements, walks you through building your System Security Plan, and produces the SPRS score your prime contractor needs to see on file.
Ready to get compliant?
PCC gives subs a plain-English path to CMMC Level 1.
Knowing the habits is step one. The compliance package walks you through which requirements you've already met, where your gaps are, and how to document everything for your SPRS submission — the score your prime contractor needs on file before you can keep working their contracts.