What Changed In This Release
- Added CMMC assessment criteria to complement the existing NIST SP 800-171A assessment criteria mapping.
- Broke the single supplemental documentation file into individual artifact documents.
- Renamed the Supply Chain Risk Management (SCRM) document to Third-Party Security Management (TPSM).
- Renamed and wordsmithed AC-23 Use of External Systems & Services, wordsmithed the Audit & Accountability (AU) policy, and wordsmithed AC-01, AC-10 and AC-21.
- Replaced "information systems" with "systems".
- Added Artifact 29, Mission, Vision & Strategy template statements.
- Updated RE-02 so stakeholders determine backup method, frequency and retention, including Recovery Time Objectives (RTO) and Recovery Point Objectives (RPO).
Did You Purchase An Older Version Of This Product?
Releases from before 2024 are significantly out of date. Existing customers are encouraged to repurchase the current version at 50% of the original product price.