Hi all,

Any thoughts on apps to handle the paperwork associated with NIST SP 800-171 and NIST SP 800-53 r5 compliance (which right now is all handled in word and excel?

What I'm looking for is:

• Need to Have
  • End Results - generate SSP toward both standards (and possibly include SOC1 or SOC2)
  • Generate and manage POAM
  • Centrally manage policies/procedures
• Would like to have
  • Manage workflows/todo lists (i.e, roles need to be reviewed on an annual basis)
  • Upload and manage artifacts (the documentation of the role review noted above).

Those are the core tasks as we're looking to update to the latest revisions (again).

Thanks!