Writing an SSP and POA&M for NIST 800-171 (Small Contractor Guide)
Every small defense contractor eventually gets told they need a system security plan. Almost nobody gets told where that requirement actually comes from, what has to be in it, or why the document they downloaded from a template site will fail an assessment. This is the practical version, written for a shop with five people…