DFARS CUI Cyber Incident Report Form CRMP Template

NIST SP 800-171 CRMP Checklist

NIST SP 800-171 Cyber Risk Management Plan Checklist (03-26-2018)

Security Audit Plan (SAP)

Use the modified NIST template.

DFARS Incident Response Form

Use the excel file template for a DoD data incident.

US-CERT Incident Response Form

Use the excel file template for a non-DoD data incident.

Event/Incident Response Plan (EIRP)

Use the modified FedRAMP templates.

Event/Incident Communications Plan (EICP)

Use the modified FedRAMP template (ESTCP EICP Graphics).

System Security Plan (SSP)

Recommend using the CSET tool/template or DoD Core Authorization Package excel file.

Security Assessment Report (SAR)

ESTCP does not require a SAR, however, many insurance companies or AO’s may require a SAR. An organization can use the modified FedRAMP template.

Plan of Action & Milestones (POAM)

Use the modified FedRAMP templates (GSA and DoD provided) (POAM Template).

NIST SP 800-53 R4 and 800-82 R2 Merged Example

The complete security controls listed with the IT portion and the OT Supplemental Guidance added.

NIST SP 800-82 ICS Overlay Security Controls

An excel file that adds/removes security controls from the IT baseline for OT FRCS.

NAVFAC ICS Checklist

NAVFAC Control System Inventory

FRCS Pentest Checklist

A checklist for FRCS to ensure the OS and vendor software, physical networks (firewalls, routers, devices, etc.) are properly hardened and configured to the JIE requirements.

FRCS FAT and SAT Checklist

A checklist for FRCS to ensure the OS and vendor software, physical networks (firewalls, routers, devices, etc.) are properly hardened and configured to the JIE requirements.

FRCS RMF ATO WBS

This cost template is for investigators to use when preparing their full cost proposal and breaks down the 6 Steps of the RMF into distinct cost line items. The IE or ESTCP office will provide a Subject Matter Expert (SME) to assist the teams to prepare the documents and submittals.

ESTCP Information Technology Policies and Procedures

A generic template of recommended policies and procedures (artifacts) to support the answers to the security control questions.

DoD RMF Core Security Authorization Package (replica of eMASS)

The RMF Families of Security Controls (NIST SP 800-53 R4 and NIST SP 800-82R2) that must be answered to obtain an ATO on the DoDIN.