00 Introduction Guide
CSfC CM Complete Compliance BundleIntroduction Guide
All 9 monitoring sections plus mandatory GRC templates.
Equivalent consultant cost avoided. GSA rate: $150–$332/hour.
CM Policy, Data Lifecycle, COOP, Logging Standards, Audit Checklist.
All 118 rules pass schema validation on Elasticsearch 8.12.
Save 400++ hours of documentation work — start immediately with expert-crafted templates
8 files · 156 formulas
CSfC CM Complete Compliance BundleIntroduction Guide
• Elasticsearch 7.x or 8.x cluster (accessible via HTTP/HTTPS)
CSfC CM Alert RulesCapability Package Selection Guide
Workbook with 8 tabs: Instructions, MP6 Gray Management, MP7 Red Management.... Contains 156 live formulas.
CSfC Continuous MonitoringContinuity of Operations Plan
💡 Practical note: Logging without reviewing is just storage. Assign someone to review critical logs weekly.
💡 Practical note: Logging without reviewing is just storage. Assign someone to review critical logs weekly.
💡 Practical note: Logging without reviewing is just storage. Assign someone to review critical logs weekly.
Your auditor is coming. Here's everything they need to see.
118 ElastAlert2 rules + 5 mandatory GRC documents. Complete CSfC CM Annex V1.0 coverage.
One-time purchase — no subscription
Every rule follows this exact structure — NSA requirement reference, ECS 8.x fields, severity classification, and actionable remediation steps.
1# Requirement: CM-SM-9 2# Source: CSfC CM Annex V1.0 — Table 16 3# Severity: HIGH 4# ECS Version: 8.x 5name: "CM-SM-9 — Failed Login Threshold Exceeded" 6index: windows-events 7type: frequency 8num_events: 3 9timeframe:10 hours: 2411query_key: host.name12realert:13 minutes: 1514timestamp_field: "@timestamp"15filter:16 - term:17 winlog.event_id: 462518alert_subject: "[CM-SM-9] [HIGH] Failed Login Threshold"19alert:20 - debug21 - indexer
Maps directly to CM-SM-9 in NSA CSfC CM Annex V1.0 Table 16 — traceable to the exact NSA requirement.
Uses winlog.event_id (not EventID) — correct for Winlogbeat 8.x and Elastic Agent deployments.
type: frequency with num_events: 3 and timeframe: 24 hours — exactly matching the CSfC CM-SM-9 threshold.
realert: 15 minutes prevents alert flooding while ensuring ongoing attacks are still reported.
Every alert includes 5 specific actions the analyst should take — not just a notification.
Alerts go to both debug log and Elasticsearch index for dashboard visibility and audit trail.
Total time: under 3 minutes from purchase to your first detection alert firing.
Receive your ZIP instantly after purchase. Contains all rules, deployment guide, and config sample.
pip install elastalert2 — copy config.yaml to your ElastAlert directory. Point it at your Elasticsearch instance.
Copy rule files to your rules/ directory. One command: elastalert --config config.yaml
ElastAlert begins monitoring immediately. First alerts fire as soon as matching events appear in your Windows Security logs.
Built by Practitioners
Real-world audit experience — original content built by practitioners who’ve owned compliance programmes
“Built because teams shouldn’t have to build compliance documentation from scratch.”
Your auditor just sent the document request list. Forty-seven items. Your stomach drops because you know at least twenty of them don't exist in any usable form.
You get 130 practitioner-grade files. including 1 structured Excel workbook ready for your data. plus 7 Word documents written in plain professional language your auditor will recognise and your board will approve. Everything is fully editable — add your logo, adjust to your environment, make it yours. No locked files, no vendor lock-in, no recurring fees.
Building this from scratch takes 200-400 hours of senior staff time. That's $20,000-$40,000 in loaded labour cost — assuming your team has the expertise. Most don't, which means consultant fees on top. At $1299, you're investing less than a single hour of consultant time for deliverables that take weeks to create.
This is practitioner-grade documentation — built by practitioners with real-world experience implementing compliance frameworks across government, financial services, and enterprise environments. Not theory. Not templates copied from the internet. Real deliverables that have passed real audits.
Every week you delay is another week of undocumented risk. Your team deserves better tools than a blank page.
Complete compliance evidence package for the Authorizing Official.
118 pre-built rules covering every monitoring point — deploy immediately.
5 mandatory documents with audit checklist — compliance-ready on day one.
Deliver CSfC CM compliance to government clients without building from scratch.
After years implementing compliance programmes — building frameworks from scratch, drafting playbooks, owning audit responses — one thing became clear. The documentation that protects your business shouldn’t cost five figures in consultant fees. It shouldn’t take months to build. And it shouldn’t require an army of specialists most teams can’t afford.
Every template in this store was built from real audit experience. Not theory. Not AI-generated fluff. Real frameworks that have passed real audits, satisfied real regulators, and protected real teams.
GRCadia exists so your team can focus on security — not paperwork.
GRCadia Team — Practitioner-built templates for governance, risk, and compliance professionals
The Universal Core has 67 rules covering CM-SM, MP6, and MP7. This Complete Bundle adds 51 more rules for CM-MP1 through CM-MP5 and CM-MP8, plus 5 mandatory GRC documents — everything you need for full CSfC CM compliance.
CM Policy and Procedures (CM-GR-13), Data Lifecycle Plan (CM-GR-20), Continuity of Operations Plan (CM-GR-14/15/16/17), Logging Standards Guide (CM-LN-1 through CM-LN-17), and Audit Checklist with compliance dashboard.
The included CP Selection Guide has a matrix showing which rule sets apply to Mobile Access (MA), Multi-Site Connectivity (MSC), and Campus WLAN deployments.
Yes — rules are plain YAML files, documents are Word (.docx) and Excel (.xlsx) formats. Fully editable.
Use code LAUNCH20 for 20% off
All sales final — no refunds on digital downloads