System Security Plan Template 800 171

It will map the nist 800 171 controls to a solution offered on campus and the users that are authorized to administer the solution.

System security plan template 800 171. 1 system security requirements and describes controls in place or planned to meet those requirements. It is important to understand that there is no officially sanctioned format for a system security plan ssp to meet nist 800 171. 1 system security requirements and describes controls in place or planned to meet those requirements. System security plan template. Valid for 1 year.

Each section includes a blue box of text like this which describes what the section is looking for and how to complete it. However organizations ensure that the required information in sp 800 171 requirement 3 12 4 is conveyed in those plans. This ssp much like the environment based ssp is to ensure that solutions offered on campus confirm to the controls of nist 800 171 and are suitable to process and store cui. Dod contractors who have an internal it department who has cyber security knowledge can opt to develop an ssp in house. The department of defense s final guidance requires the review of a system security plan ssp in the assessment of contract solicitation during the awards process.

Nist computer security resource center csrc. The dod has a ssp template available to assist in the process. This is a nist 800 171 system security plan ssp template which is a comprehensive document that provides an overview of nist sp 800 171 rev. Outsource to an mssp. It is prohibited to disclose this document to third parties page 3 of 133 without an executed non disclosure agreement nda instruction on filling out the ssp template.

You can t go wrong by starting with this free template for your 800 171 self assessment. There is no prescribed format or specified level of detail for system security plans. This document is intended as a starting point for the it system security plan required by nist 800 171 3 12 4. Documentation supplemental material cui ssp template. To download the ssp template click here.

The ssp toolkit also comes with a poam and waiver document that are required to document corrective. The system security plan ssp toolkit is a comprehensive document that provide an overview of nist sp 800 171 rev.