Skip to content
PCs engineered to help with CMMC.
HRDN-IT™ is the simple and affordable on-premise CUI handling solution for small businesses pursuing NIST 800-171 and CMMC compliance.
Available for rent or purchase.
Accelerate your CMMC compliance with HRDN-IT™
More affordable than cloud enclaves
HRDN-IT™ is significantly cheaper than subscribing to a CUI enclave service hosted in the cloud.
Designed for small businesses
HRDN-IT™ benefits small businesses who want help with implementation of the technical requirements in NIST 800-171.
Minimal CUI scope
HRDN-IT™ is intentionally engineered to limit CUI flow to a very minimal on-premise physical enclave.
How it works:
Totem Technologies takes a laptop running Windows 11 and “hardens” it to help meet most technical requirements in NIST 800-171, such as by:
- Installing separate admin- and non-administrator accounts
- Removing all unnecessary software and applications
- Configuring the PC for encrypting CUI at rest
- Applying the Windows Security Baseline and configuring password and account lockout policies
- Installing and configuring a local event log analysis tool with alerting capability
This hardened PC is then combined with a hardened router and a FIPS 140-2-validated USB drive and shipped to you. The result is a minimal “on-prem” CUI enclave:
Finally, we include our Totem™ CMMC Planning tool, to be used for documenting your System Security Plan (SSP) and Plan of Action & Milestones (POA&M), among other important CMMC artifacts. We’ll provide a customized SSP and POA&M within Totem™, clearly outlining system configurations and evidence commensurate with NIST SP 800-171A, remaining compliance gaps, and a roadmap towards CMMC Level 2 readiness.
Some important notes about HRDN-IT™:
HRDN-IT™ is not a managed service. In other words, Totem Technologies intentionally does not provide any day-to-day monitoring or administration of HRDN-IT™ on your behalf. Rather, we’ve designed HRDN-IT™ to satisfy as many NIST 800-171/CMMC requirements as feasible “out of the box”, then equip you with the tools and processes to perform the remainder yourself, helping you avoid paying exorbitant external service provider management fees.
HRDN-IT™ is geared towards entities that want to limit their CUI flow to a very minimal scope within a single physical environment.
HRDN-IT™ helps with meeting the technical requirements in NIST 800-171, but it will still require the organization to identify some organizational policies and business processes. We will outline these gaps for you clearly in a provided Plan of Action & Milestones (POA&M).
Fully transparent pricing. For rental or purchase.
Rent HRDN-IT™
Renew on an annual basis
$9,995
Per year
- One (1) hardened PC
- One (1) hardened router
- One (1) FIPS 140-2-validated USB drive
- Annual subscription to Totem™ CMMC Planning tool
- Customized SSP and POA&M templates
- Detailed user guide
- Two (2) hours of initial setup support
Purchase HRDN-IT™
No annual renewal*
$19,995
One-time payment
- One (1) hardened PC
- One (1) hardened router
- One (1) FIPS 140-2-validated USB drive
- Annual subscription to Totem™ CMMC Planning tool
- Customized SSP and POA&M templates
- Detailed user guide
- Two (2) hours of initial setup support
*Totem™ subscription requires annual renewal
HRDN-IT™ Frequently Asked Questions
The Department of Defense has established, in DFARS clause 252.204-7012, that any external cloud service provider (CSP) that stores, processes, or transmits any covered defense information (essentially DoD CUI) must meet the security requirements “equivalent” to the FedRAMP Moderate baseline. This is a significant undertaking for any CSP, and a very costly one, with hundreds of security controls and thousands of assessment objectives to implement and address.
These costs ultimately transfer to consumers. HRDN-IT™ is intentionally designed to avoid these steep and continually increasing costs by establishing a local, physical CUI enclave with a very minimal CUI scope.
Good candidates for HRDN-IT™ include:
- Small- and micro-business defense contractors handling CUI
- Entities that can limit their CUI flow to a single physical environment
- Entities that were recently awarded a DoD contract and facing NIST 800-171
- Entities competing for their first DoD contract and facing NIST 800-171
None. Totem Technologies intentionally does not offer any managed services (e.g., ongoing security monitoring or administration) with HRDN-IT™. We perform the bulk of the challenging implementation of NIST 800-171 for you upfront, then adopters take HRDN-IT™ and see it through to CMMC readiness using our suggested roadmap. This helps you avoid paying exorbitant external service provider fees while saving time on NIST 800-171 implementation.
Yes. Additional hardened PCs can be rented for $2,500/year or purchased for $5,000.
If you’d like HRDN-IT™ to be customized beyond what is listed here, let us know!
HRDN-IT™ components will have the following specs, unless otherwise stated:
- Hardened PC: Windows 11 Pro, 15.6″ display, 512 GB SSD, 16 GB RAM, i7 processor or newer, USB-A, USB-C, HDMI, Ethernet
- Hardened Router: Supports 5GHz and 2.4GHz, 802.11ax, multiple LAN/WAN ports
- USB Drive: 2TB, FIPS 140-2-validated, PIN authentication
If you are interested in a Linux variation of HRDN-IT™, please contact us for more information.
Depending on the software/application, we may be able to install it for you, unless it requires a paid license. If it does not require a paid license, it’s likely we can install and harden it for you. Alternatively, you can install it once you receive your PC.
