Free guide
Writing a System Security Plan: Section-by-Section Guide
A practical walk-through of what a System Security Plan for NIST SP 800-171 and CMMC Level 2 should contain, from system boundary and CUI flows to requirement-by-requirement implementation, inherited controls, the POA&M and ongoing maintenance.
What's inside
- What NIST SP 800-171 requirement 3.12.4 asks for
- The sections a usable SSP needs, and what to put in each
- Documenting cloud and service provider responsibilities
- How the SSP and POA&M work together, and keeping both current
More resources
Free checklist
CMMC Level 2 Readiness Checklist
All 110 NIST SP 800-171 Rev. 2 security requirements, the basis of CMMC Level 2, grouped into the 14 requirement families with tick boxes, so you can review where you stand before a self-assessment or certification assessment.
Get the checklist
Free checklist
CMMC Level 1 Basic Safeguarding Checklist
The 15 basic safeguarding requirements of FAR 52.204-21, quoted exactly, with the matching CMMC Level 1 requirement IDs from 32 CFR part 170, to help you prepare for the annual Level 1 self-assessment and affirmation in SPRS.
Get the checklist
Free guide
DFARS 252.204-7012 Cyber Incident Reporting: Quick Guide
What DFARS 252.204-7012 requires when a cyber incident affects covered defense information: the 72-hour report, the certificate you need, malware submission, 90-day preservation of images, forensic access and subcontractor duties, with a one-page checklist.
Get the guide