Identifying a Certified Third Party Assessing Organization (C3PAO): Revision history

Diff selection: Mark the radio buttons of the revisions to compare and hit enter or the button at the bottom.
Legend: (cur) = difference with latest revision, (prev) = difference with preceding revision, m = minor edit.

2 March 2025

1 March 2025

28 February 2025

  • curprev 16:5516:55, 28 February 2025Thebert talk contribs 1,720 bytes +1,720 Created page with "'''SPA Categorization''' Some assessors believe that a Security Protection Asset (SPA) includes any systems components that are used in an organizations SSP for supporting evidence.  Other assessors only identify an SPA a systems that provide protection to components as stated in the NIST 800-171 publication.   Ask your C3PAO if they expect systems mentioned in the SSP for the purpose of providing evidence to meeting an assessment objective an example of an SPA?   D..." Tag: Visual edit