The System Security Plan: Outline to Your Organization’s Journey Towards NIST SP 800-171 Compliance
When people ask me, “what is the single most important document to have to start working towards complying with DFARS clause 252.204-7012 and NIST SP 800-171?”, I always point them to their System Security Plan (SSP). Wait, what?