by Mark a. Russo Cissp-Issap Ciso (Author)
NIST 800-171 SECURITY AUDITING:: Special 2019 edition update includes section on Controlled Unclassified Information (CUI) marking, handling, and storage...over 30 pages of detailed instructions (Sep 2019)... Mark... ***FEB 2020 UPDATE INCLUDES FREE ACCESS TO A CYBERSECURITY POLICY, and HOW TO CREATE ALL OTHER SUPPORT ACCREDITATION DOCS. AN OVER $500 VALUE***This book is designed to walk the auditor through each of the 110 controls with a thorough understanding of whether a control is met or not. There is no "partial credit." While the process is subjective, the assessor must make a reasonable determination that the system owner understands and can demonstrate his company or agency's compliance with NIST 800-171. We include a compliance checklist designed to build out a record of the audit. This has been one of our most sought books on the evolving state of NIST 800-171.