Based on customer demand, we developed an editable System Security Plan (SSP) template that is specifically designed for NIST 800-171 compliance. This template is available for immediate download.
It is important to understand that there is no officially-sanctioned format for a System Security Plan (SSP) to meet NIST 800-171 compliance requirements. This template is based on SSP requirements that are used for other US government compliance requirements for SSPs, but it is tailored to document the entire Controlled Unclassified Information (CUI) environment for an organization.
A key concept to keep in mind with the SSP is that it should be complete enough for a reasonable person to pick up, read through and understand the following information:
The definition of CUI, in regards to the company’s operations. This is how CUI is defined in contracts.
Where CUI is stored, transmitted or processed.
What controls are in place to protect CUI as it is stored, transmitted and processed.
Any deficiencies that exist in protecting CUI, if applicable.
Remediation plans address known deficiencies, if applicable.
The SSP is meant to be a "living document" that captures pertinent information on the controls implementation for NIST 800-171. Specifically, the SSP template covers all Controlled Unclassified Information (CUI) and Non-Federal Organization (NFO) controls that are listed in Appendices D and E of NIST 800-171.
Plan of Action & Milestones (POA&M) Template Included
At no additional cost, your purchase of the System Security Plan (SSP) template comes with a Microsoft Excel template for a Plan of Action and Milestones (POA&M) that is editable for your needs.
NIST 800-171 System Security Plan (SSP) Template Cost Savings Estimate
As you can see, when you factor in internal staff time to perform reviews and refinements with key stakeholders, purchasing the NIST 800-171 version of the System Security Plan (SSP) from ComplianceForge is approximately 40% ($900+ savings) of the cost as compared to writing your own documentation and 13% ($3,500+ savings) of the cost as compared to hiring a consultant to write it for you!