Skip to content

NIST SP 800-171 REV. 3 Planning

Ensure that the organization has policies, procedures, and plans to implement security controls for protecting CUI

03.15.01 Policy and Procedures

Develop, document, and disseminate to organizational personnel or roles the policies and procedures needed to satisfy the security requirements for the protection of CUI.
03.15.02 System Security Plan

Develop a system security plan that:
03.15.03 Rules of Behavior

Establish rules that describe the responsibilities and expected behavior for system usage and protecting CUI.

Need help putting this into practice? See our NIST SP 800-171 & CMMC compliance services or read our NIST SP 800-171 & CMMC articles.

See LakeRidge in action.

Talk with our team about your framework, your gaps, and the right plan.