Globe-America Consulting — Compliance Foundation
SSP Scope & Intake Tool
The System Security Plan (SSP) is required under NIST SP 800-171 control 3.12.4 and is the primary document a C3PAO uses as their assessment roadmap. This intake tool collects the scoping and environmental information your Globe-America advisor needs to draft, structure, and finalize your SSP. Complete all sections — the more specific your answers, the faster your SSP can be finalized.
⚠ SSP Development is a Globe-America Deliverable
This intake tool collects your inputs. Globe-America will review, validate, and produce your finalized System Security Plan as part of your Compliance Foundation engagement. The output of this tool is an SSP Scope Brief — a structured document your advisor uses as the SSP drafting foundation, not the SSP itself.
SSP Scope Brief
Ready for Globe-America to Build Your SSP?
Once you complete this intake, your Globe-America advisor reviews the scope brief, validates your CUI boundary, and begins drafting your System Security Plan. This deliverable is included in your Compliance Foundation engagement. Book a session to discuss your scope and start the SSP process.
Book a 60-Min Readiness Consultation →
60-minute session · $197 · Applied as credit toward your engagement
What Drives the Price Range
Low end ($15,000) — Fewer than 25 employees, single CUI boundary, existing cloud environment (M365/GCC), some documentation already in place. Scope is contained and remediation is primarily policy and configuration-based.High end ($32,000) — 25–100+ employees, multiple sites or CUI boundaries, mixed on-premises and cloud infrastructure, significant documentation gaps, and more extensive policy development, control implementation guidance, and evidence preparation required.
This SSP Scope & Intake Tool is based on NIST SP 800-171 Rev 2 requirement 3.12.4, the NIST SP 800-18 SSP framework adapted for CUI environments, and CMMC Assessment Guide Level 2 v2.13. The output of this tool is an intake document for Globe-America use — it does not constitute a formally complete System Security Plan. No CUI should be entered into this tool. © 2026 Globe-America Consulting Inc. — Fort Worth, TX.