LAWSON CYBER / SPRINT WORKSHEET
Guide: https://lawsoncyber.com/network-guide.html

Keep this in your own files. Don't put passwords, configs, or network
diagrams on it, and don't send it through the website form. It's optional
and isn't a statement of work or a change approval.


1. SCOPE  (week 1, before any checks)

Why now (prime questionnaire, contract, score you can't defend):
Devices in scope (1 firewall or HA pair, up to 12 switches, up to 10 servers):
Out of scope, in writing:
Benchmark and version for each device type (STIG / CIS):
Where the evidence will be stored (your storage):
Read-only access set up by / how it gets switched off:


2. PEOPLE

Business owner (scope decisions, final sign-off):
IT lead or MSP (access, change process):
Change approver:
Services that must not go down:


3. CHANGE WINDOW  (plan in week 2, window in week 3)

[ ] Approved list of changes
[ ] Window date and time:
[ ] Latest time to stop and roll back:
[ ] Configs saved and rollback tested
[ ] Your team's after-change checks, and who runs them:
[ ] Approver has signed off


4. HANDOFF  (week 4)

[ ] SPRS score before:          after:
[ ] STIG / CIS checklists for every device in scope
[ ] Evidence exhibit for each covered requirement
[ ] Change record with before and after checks
[ ] Open items, each with an owner:
[ ] Our access removed
[ ] Signed off by:                       Date: