How to Use ODVs Internally

About this episode

The episode discusses the changes in NIST 800-171 Rev 3 and the importance of adapting security plans for compliance.

In this episode, the hosts discuss the significant changes introduced in NIST 800-171 Rev 3, focusing on the transition from Rev 2 to Rev 3, the importance of Organizational Defined Parameters (ODPs), and the role of external service providers in compliance. They emphasize the need for System Security Plans (SSPs) to be living documents that adapt to evolving security needs and the necessity for contractors to prepare for the upcoming changes to avoid complications during assessments. Website...

People in this episode

Host: Bobby Guerra

Topics covered

• NIST compliance
• Organizational Defined Parameters
• System Security Plans
• security assessments
• external service providers

Keywords

• NIST 800-171
• Rev 3
• Organizational Defined Parameters
• System Security Plans
• compliance
• security assessments
• contractors

Mentioned in this episode

Organizations: NIST

Books & works: NIST 800-171 Rev 3, NIST 800-171 Rev 2

More episodes of Climbing Mount CMMC

• A Deep Dive into Rev 3: Incident Response (feat. Adam Evans) · June 11, 2026 · 22 min
• What Qualifies As a "Significant Change" in CMMC? · June 4, 2026 · 37 min
• What is CMMC Inheritance and How Do I Apply It? (feat. Adam Evans) · May 28, 2026 · 29 min
• What is "The Game of Chicken" in CMMC? (feat. Lawrence Cruciana) · May 21, 2026 · 47 min
• Cyb-Her: Transitioning Your MSP to CMMC Compliance · May 14, 2026 · 27 min
• Working with a C3PAO (feat. Fernando Machado) · May 7, 2026 · 43 min