Nist 800 171 System Security Plan Ssp Template

Valid for 1 year.

Nist 800 171 system security plan ssp template. Each section includes a blue box of text like this which describes what the section is looking for and how to complete it. A managed security service provider who provides nist 800 171 compliance services can develop the ssp for you for a fee. There is no prescribed format or specified level of detail for system security plans. Dod contractors who have an internal it department who has cyber security knowledge can opt to develop an ssp in house. It will map the nist 800 171 controls to a solution offered on campus and the users that are authorized to administer the solution.

1 system security requirements and describes controls in place or planned to meet those requirements. It is prohibited to disclose this document to third parties page 3 of 133 without an executed non disclosure agreement nda instruction on filling out the ssp template. This is a nist 800 171 system security plan ssp template which is a comprehensive document that provides an overview of nist sp 800 171 rev. To download the ssp template click here. In other words that means that dod contracts will be assessed on the ability of the contractor to provide proof of compliance with nist 800 171.

Outsource to an mssp. Nist 800 171 system security plan ssp template the ssp is meant to be a living document that captures pertinent information on the controls implementation for nist 800 171. The nist sp 800 171 system security plan ssp plus package is a comprehensive document that provides an overview of nist sp 800 171 rev. It is important to understand that there is no officially sanctioned format for a system security plan ssp to meet nist 800 171. The dod has a ssp template available to assist in the process.

Specifically the ssp template covers all controlled unclassified information cui and non federal organization nfo controls that are listed in appendices d and e of. Documentation supplemental material cui ssp template. 1 system security requirements and describes controls in place or planned to meet those requirements. This document is intended as a starting point for the it system security plan required by nist 800 171 3 12 4. The ssp toolkit also comes with cdi discovery worksheet dfars performance tool a po am and waiver document which are required to document corrective.

Nist computer security resource center csrc.