BATB 20 is the free operating system. Standards are overlays. Connectors automate evidence. NIST SP 800-171 and CMMC sit on top of this baseline; they are not a substitute for it.
The twenty practices, in the order we run them
Practice titles are the official campaign titles. The six-stage sequence is our independent guidance, not part of the official campaign. Each title opens its free implementation guide.
Free at brilliantatthebasics.us
- A plan in twelve questions: a sequenced 30/60/90-day plan across the twenty practices, built in your browser.
- IT and OT scorecards against the seven-step ladder: absent, documented, configured, deployed, operating, measured, governed.
- Twenty practice guides with implementation steps, validation checks, evidence examples, and small-business and mature-environment paths.
- NIST SP 800-171 reference for Rev. 2 and Rev. 3, with requirement-by-requirement transition notes, plus cloud setup guides for five providers.
Crosswalks on that site are independent analytical resources. They are not official DoW, NIST, CyberAB, or assessment-organization determinations and do not establish compliance, certification, or contractual sufficiency.
How it shows up in your engagement
Your delivery team records your level on each practice, and you see it on the Baseline page of the client portal with the next rung to reach. Recorded implementation state is program metadata, not a compliance determination or certification. The BATB Workspace, where organizations operate the baseline themselves, is in private preview.
Independence. BrilliantAtTheBasics.us is an independent educational resource published by inDirectIT, Inc. It is not affiliated with, sponsored by, approved by, or endorsed by the U.S. Department of War or any other government agency. Official guidance is available at dowcio.war.gov.
Know where you stand on all twenty.
We will walk the twenty practices with your team and record a baseline before anyone writes a policy. Or email rj@indirectit.com directly.