NIST 800-171

Module 1: This module provides an overview of the DFARS requirement that led to NIST 800-171, including key terms, understanding CUI, and the journey to NIST 800-171. The module also covers the applicability scoping and requirements, as well as creating a Body of Evidence (BOE).

Module 2: Understand the NIST 800-171 controls in detail, covering access control, awareness and training, audit and accountability, configuration management, identification and authentication, incident response, maintenance, media protection, personnel security, physical protection, risk assessment, security assessment, systems & communications protection, and system and information integrity.

Module 3: Gain insights into policies and plans, including an overview of policies and plans, and the policies and procedures you should have to comply with NIST 800-171.

Module 4: Learn to create a System Security Plan (SSP) for implemented controls, covering an overview of SSP and the detailed process of creating an SSP.

Module 5: Understand and create a Plan of Action and Milestones (POAM) for unimplemented controls, including an overview of POAM and the process of creating a POAM.

Module 6: Review how NIST 800-171 compliance prepares an organization for CMMC Levels 1-3, including understanding CMMC, the Supplier Performance Risk System (SPRS), and submitting a NIST 800-171 assessment to SPRS.

Module 7: This module brings everything together with a comprehensive review of NIST 800-171, a project introduction, and references to consolidate your learning.