BASELINE by Bedrock is an independent NISP Readiness Assessment for cleared contractors. Establish your current security posture, identify inspection risk, and receive a structured corrective-action roadmap before formal review. Structured control intake mapped to NISPOM Chapter 2, 5, and 8, ICD 705, insider threat program maturity, and FOCI posture. Reviewed and signed by a cleared Bedrock principal. Fixed-fee advisory engagement structured to fit common government purchase-card and simplified acquisition workflows.
Bedrock provides advisory analysis based on customer-supplied information. Bedrock identifies gaps, risks, and recommended next actions against the published NISPOM, ICD 705, 32 CFR Part 117, and related standards. Bedrock does not guarantee compliance, accreditation, certification, inspection results, or government acceptance. The deliverable is an opinion. The decision authority on accreditation and inspection outcomes rests with the cognizant security agency.
In 2026 the Government Accountability Office published GAO-26-107861 documenting NISP enforcement findings across the cleared industrial base. The report is public. The numbers are real. Every cleared facility operates within the inspection ecosystem the GAO reviewed.
The findings span personnel security, classified information handling, insider threat program maturity, FOCI posture, and physical security at cleared facilities. Small and mid cleared contractors are over-represented in the findings, mostly because the big primes have full-time FSO benches and the small ones do not.
If you hold an FCL or are pursuing one, you are inside the population the GAO is reporting on. A structured pre-inspection review against the published standards is one way cleared contractors prepare for the next DCSA touch point. It does not predict what DCSA will find, and it does not substitute for the agency's own determination.
If you recognize your facility in any of the lines below, the assessment is built for you. Two seconds to self-identify.
No drip emails, no upsell phase, no software seat to provision. Three artifacts, delivered in fourteen days.
Structured intake the customer fills out at their own pace, on their own schedule. Mapped control by control to NISPOM Chapter 2, 5, and 8, ICD 705, insider threat program maturity, and FOCI mitigation posture. The form is the easy part. The interpretation is the value.
The intake is read line by line by Bedrock's cleared principals. We are cleared. We have run inside-the-fence FSO and SSO programs. We are not subcontracting this to a junior consultant in a different time zone.
Signed PDF. Each identified gap is cited to the published rule it touches. Each recommended remediation step is sequenced and effort-scoped. You can use it as an internal action plan, an FSO record, or an artifact for your sponsor. It is an advisory opinion based on the intake you provided, not a determination of inspection outcome.
One thirty-minute call after delivery to walk you through the report, prioritize the gaps, and answer questions. Included in the fixed fee. No add-on, no metered minutes.
The intake is structured around the same control families DCSA uses on inspection. No surprises in either direction.
If a vendor promises any of these, walk. The market is full of theater. BASELINE by Bedrock is the opposite.
Fixed cadence. We tell you what is happening on which day. You always know what is next.
Thirty-minute kickoff call. Intake link delivered. Scope confirmed in writing.
Customer completes the intake at their own pace. We are available for clarifications.
Bedrock principal reads the intake line by line. Drafts the gap analysis and remediation roadmap.
Signed PDF delivered. Optional thirty-minute debrief call scheduled inside the same window.
Most BASELINE engagements are structured as fixed-fee assessments designed to fit common government purchase-card and simplified acquisition workflows. This is not hourly consulting and it is not a six-figure engagement. It is a defined, repeatable advisory engagement with a fixed scope. Pricing is confirmed on the executive call, alongside scope, posture, and timing.
One thirty-minute call confirms your facility profile, your inspection posture, and whether the assessment is the right product for where you are. If it is, we schedule kickoff inside the same week. If it is not, we tell you that on the call and route you to the right path.
If your FCL is active or pending and you are inside the population the GAO is reporting on, BASELINE is built for you. Call to schedule the executive scoping conversation; engagements typically kickoff inside the same week.
