Set a Workspace Passphrase
This passphrase encrypts everything you enter (AES-256-GCM, key derived locally via PBKDF2). It is never stored anywhere — if you lose it, your workspace data cannot be recovered.
Why This Tool Is Single-User
A deliberate security decision, not a limitation we plan to fix.
This tool does not support multiple people editing the same incident at once. The moment two people need to work an incident from two different devices in real time, the data has to leave this browser and pass through some server or sync layer — and that breaks the core promise of this tool, which is that FCI/CUI incident data never leaves your local machine.
Instead: one owner works an incident at a time. Use the Print / Save as PDF option on any report to share a point-in-time snapshot with counsel, comms, or leadership. And when you're done, use the DEFCON-1 PURGE button below to wipe the workspace completely — no lingering copy of sensitive incident data is left sitting in a browser profile.
Engine Status
Regulatory reference data and scenario library loaded for this session.
Saved Incidents
Every incident is encrypted and persisted locally as you work — reopen one here at any time, including after a refresh.
Subcontractor Roster
Save each subcontractor's contact info once here, then add them into any incident's flow-down matrix with one click instead of retyping.
IR Exercise Completion Log
Every tabletop exercise you complete is logged here as evidence your organization tests its incident response capability (NIST SP 800-171 3.6.3).
Organization Profile
Sets your flow-down role for every incident you open. You can change this per-incident later.
Select a Mode
Tabletop Exercise is the recommended way to use this tool for course practice. Live Tracking is a working demonstration of the same engine against a real timeline.
Tabletop Exercise Simulator
Run one of 14 hardcoded, hyper-detailed defense-contractor scenarios. Mid-exercise injects (regulatory, legal, operational, PR) fire as you progress. Nothing here is a real incident.
Live Incident Tracking
Starts a real 72-hour DFARS clock against data you enter yourself. Read the disclaimer banner above before using this for anything but a drill.
Workspace Controls
Liability Disclaimer & Terms of Use. This tool is a local-browser sandbox built by Brazen Learning for incident structuring and tabletop preparation on DFARS 252.204-7012, CMMC 2.0 (32 CFR Part 170), NIST SP 800-171, and related federal incident-reporting obligations. It is not an authorized System of Record, does not constitute legal advice, does not submit anything to DC3/DCISE or any government system, and does not certify compliance. Regulatory citations, control mappings, and thresholds are maintained for training currency and are not warranted as complete, current, or verbatim — always verify against DC3's DCISE reporting process (icf.dcise.cert.org; the legacy DIBNet portal was decommissioned June 6, 2025), acquisition.gov, and the current NIST SP 800-171 publication, and consult qualified counsel and your organization's own Incident Response Plan before relying on this tool for any real event. Data you enter is encrypted and stored only in this browser's local IndexedDB; nothing is transmitted anywhere. Uninstalling the browser profile, clearing site data, or using a different device/browser will make an unexported workspace unrecoverable. © 2026 Brazen Learning, LLC. All rights reserved.