System Security Plan Crash Course

Episode notes

System Security Plans are the single most fundamental documents underpinning cybersecurity compliance for defense contractors. But even after nearly 40 years of using SSPs for federal information systems there are essentially zero examples of what good looks like. Thankfully NIST is revising SP 800-18 guidance on developing SSPs and wants your comments. This is a crash course on SSPs so you can get caught up before the July 30th comment deadline. Pathfinder 101: Pathfinder Demo: DFARS 7008: DFARS 7012: DFARS 7019: NIST SP 800-18r2: NIST SP 800-18r1: The History of CMMC:

Related episodes across the Index

Other episodes covering the same guests and topics, from across The B2B Podcast Index.

• CMMC Level 2: Documentation, Costs, and Audit Readiness | Interview with Bruno LecoqSecure & Simple · on Cybersecurity89 / 100
• Mastercard CEO: AI Shopping Agents, Machine-to-Machine Payments, and the New Infrastructure of CommerceMotley Fool Hidden Gems Investing · on Cybersecurity88 / 100
• AI and Cybersecurity in SMBs: Insights from Bruno LecoqSecuring the Realm · on CMMC79 / 100
• Moving from Product Partnerships to Revenue: Jira Cooley on Owning the NumberBetween Product and Partnerships · on Cybersecurity76 / 100
• Pipeline Gives Permission to Invest Big on Brand with Jennifer JohnsonThe B2B CMO Podcast with Jon Miller and Sydney Sloan · on Cybersecurity74 / 100
• Post-Quantum Cryptography: What Every Organization Needs to Know with Michael FasuloHacker Valley Studio · on NIST72 / 100

• The DoD's "Basic" Cybersecurity Isn't Basic at All93 / 100
• A Perfect SPRS Score Turned Into a $507K Settlement64 / 100
• The DoD Said This Was "Out of Scope"... Now They're Asking About It
• CMMC Phase 2 Is Suspended... So Why Is the DoD Still Assessing Contractors?
• CMMC Phase 2 Is Suspended... But Contractor Liability Just Went UP