Administration & Regulatory Compliance

Eligibility. Engineered.

DFARS compliance involves more than implementing security controls. It requires active registration maintenance, score posting, certificate renewals, and assessment scheduling. The DIB Compliance Tracker consolidates all five key regulatory obligations into one dashboard with expiration alerts before any of them lapse.

Request a Demo ← All modules
5 DIB obligations tracked
DFARS 252.204-7012 compliance
Expiration Alerts built in
Capability

Five Key Obligations in One Dashboard

The tracker monitors the current status, last action date, and next required action for each of the five DIB compliance obligations. Each has its own renewal cycle and expiration consequence, and each is tracked independently with its own alert threshold so approaching deadlines surface before they become missed deadlines.

The dashboard gives compliance personnel and senior leadership a single view of the organization's full regulatory standing: not just the CMMC security posture, but the administrative posture that enables contract eligibility. For organizations pursuing or maintaining CMMC Level 2 certification, it connects the certification timeline to the contract performance timeline.

Dashboard Requirements Evidence POA&M Reports
1TEN compliance dashboard tracking program status across Defense Industrial Base requirements
Inside the Module

What You See Inside

Five obligation statuses
SAM.gov registration, SPRS score, ECA certificate, DIBNET enrollment, and C3PAO certification, each with current status.
Action dates
Last action date and next required action date for each obligation.
Expiration alerts
Surface in the Compliance Calendar before SAM.gov registration or the ECA certificate lapses.
SPRS tracking
Current posted score, last submission date, and a link to the live Assessment Summary.
C3PAO assessment status
Scheduled, in progress, conditional, or certified, with assessment date and assessor organization.
DIBNET, affirmation, export
DIBNET enrollment confirmation, annual affirmation status pulled from that module, and an exportable single-page status report.
The problem this solves

Contractors who have done the work to implement CMMC controls can still lose contract eligibility by missing an administrative obligation. A lapsed SAM.gov registration or an expired ECA certificate disqualifies a bid before the technical proposal is ever read. These are not security failures, they are administrative failures, and they are preventable. No more five separate tracking methods, no more SAM.gov lapses discovered when an award is delayed, no more ECA expirations found only when a DIBNET incident report fails to submit.

Reference

Five Obligations Explained

SAM.gov Registration
Annual renewal, required active for all federal contracts. Lapse means ineligibility for awards and possible interruption of existing performance.
SPRS Score Posting
Post before the first contract with a DFARS 7012 clause and update when posture changes. Lapse means contract ineligibility and FCA exposure if the score is inaccurate.
ECA Certificate
Validity period typically 1 to 3 years depending on issuing authority. Lapse means you cannot submit cyber incident reports via DIBNET.
DIBNET Enrollment
One-time enrollment with current contact information. Lapse means you cannot submit the 72-hour cyber incident reports DFARS 7012 requires.
C3PAO Certification
Three-year certification cycle, with surveillance assessments possible. Lapse means you cannot bid on contracts requiring CMMC Level 2 after the enforcement deadline.
Practices

Regulatory Requirements Supported

RequirementDescription
DFARS 252.204-7012 Safeguarding covered defense information and cyber incident reporting. Requires active SAM.gov registration, SPRS posting, DIBNET enrollment, and an ECA certificate for incident reporting.
32 CFR Part 117 CMMC program rule. Establishes the C3PAO certification requirement and the annual affirmation obligation tracked in this module.
Connected Modules

Related Modules

Administration
Annual Affirmation
Annual affirmation status is displayed in the tracker. Together the two modules cover the full regulatory standing picture.
Dashboard
Assessment Summary
The SPRS score tracked here links to the live score in Assessment Summary. One number, two views.
Planning
Compliance Calendar
SAM.gov and ECA expiration dates surface in the Compliance Calendar with advance alerts, so no obligation lapses unnoticed.
Operations
Incident Response
DIBNET enrollment tracked here is the prerequisite for submitting 72-hour incident reports via the Incident Response module.

Know your posture.

1TEN is the GRC platform built specifically for small defense manufacturers navigating CMMC Level 2.

Request a Demo