04 Record of Changes (RC)

Phase 1 - A suggested method would be to include a section in your policy specifically addressing the NIST 800-171 Revision 3 requirement for a Record of Changes (RC). This section should detail how you will document and maintain a history of all modifications made to your system security plan (SSP) and any other related documents required for compliance. It should outline the information to be recorded for each change, such as the date of the change, a description of the modification, the rationale behind the change, and the individual(s) responsible. Furthermore, it should specify how the RC will be maintained (e.g., version control system, dedicated document) and who has access to it. Finally, it should address how the RC will be reviewed and updated periodically to ensure its accuracy and completeness.

There is a table in the above example that could be used in your environment.