CyberSure Evidence Check (Windows) - v1.1.0
===========================================

What it does
- Reads this computer's security settings and compares them with the 15 CMMC Level 1
  (FAR 52.204-21) basic safeguarding requirements.
- Creates a report (HTML) on your Desktop that you can print or keep as evidence for
  your self-assessment.
- NEW in v1.1: Company Report. Combine the reports from every computer into one
  company-wide report showing which requirements have gaps, on which computers, and
  a sign-off checklist for the business practices software cannot check.
- READ-ONLY: it does not change any setting, install anything, or delete anything.
- OFFLINE: it makes no internet connections and sends no data anywhere.

Step 1 - check each computer
1. Unzip the download into a folder.
2. Double-click "Run-CyberSure-Evidence-Check.cmd".
3. Windows will ask whether to allow PowerShell to make changes. Choose Yes for a complete
   check (a few settings, such as drive encryption, can only be read by an administrator),
   or No to run with standard rights. Either way, nothing is changed.
4. The report opens in your browser and is saved on your Desktop.
Do this on every computer that handles Federal Contract Information (FCI). For Macs,
use the CyberSure Evidence Check for Mac.

Step 2 - combine into one company report (if you have more than one computer)
1. Copy each computer's report file (CyberSure-Evidence-Check_<computer>_<date>.html)
   into one folder - a USB stick or shared folder works.
2. Double-click "Run-Company-Report.cmd" and choose that folder.
3. The company report opens in your browser and is saved in that folder.
Reports from v1.0.0 cannot be combined (re-run v1.1 on those computers). If a computer
was checked more than once, only its newest report is used.

If Windows shows "Windows protected your PC", click "More info" then "Run anyway".
You can open the .ps1 files in Notepad to read exactly what they do.

Requirements: Windows 10 or 11 (Windows PowerShell 5.1, built in).

Verify your download (optional): in PowerShell run
  Get-FileHash .\CyberSure-EvidenceCheck.ps1 -Algorithm SHA256
  Get-FileHash .\CyberSure-Company-Report.ps1 -Algorithm SHA256
and compare with the SHA-256 values published on the CyberSure download page.

Important
This tool helps you prepare and document your own self-assessment. It is not legal advice,
not a certification, and not an official CMMC assessment. Passing these checks does not by
itself mean a requirement is met; many Level 1 requirements are business practices the
report lists for you to confirm. CyberSure is a private company and is not affiliated with
or endorsed by the U.S. Army, the Department of Defense, or any government agency.

CyberSure - cybersure.madethis.app
