Collateral

Print, event, and social pieces.

Every piece here draws on the same directory and NIST SP 800-171 family data as the site, so the numbers move when the directory does. Use the print button on a piece to send only that piece to the printer at its trim size. Social cards are generated for every listing at /directory/[id]/opengraph-image.

Letter

Member one-pager

CSP CollectiveInherit Prove HostFor cloud service providers

Cloud you can inherit.Proof an assessor can open.

CSP Collective is a membership and public-record directory for cloud offerings that process, store, or transmit CUI for the Defense Industrial Base. Listings are organized by authorization, not by brand. A reviewed listing is validated against a customer responsibility matrix mapped to NIST SP 800-171 Rev 2 and Rev 3.

59Offerings indexed from public record

14FedRAMP High or DoD SRG PA

8Announced Moderate equivalents

538Certified on the FedRAMP Marketplace

01InheritName the authorized CSO, the region, and the package ID. Contractors put the right offering in their boundary instead of its commercial twin.

02ProvePublish a customer responsibility matrix mapped to NIST SP 800-171 Rev 2 and Rev 3. Your customers stop rewriting your controls into their SSPs one audit at a time.

03HostGet a dated, reviewed listing an assessor can open, with a change log, a revalidation date, and the documents to request. A marketing page can't stand in for a package.

NIST SP 800-171 · Revision 2 · Feb 2020110 requirements · 14 families

NIST SP 800-171 · Revision 3 · May 202497 requirements · 17 families

Tier	Price	For	Includes
Observer	Free	OSC leads, ESP architects, students of inheritance	Directory browse, Public explainers, Intel headlines
Provider	$199 / mo	One authorized offering	Validated listing, Rev 2 + Rev 3 CRM workshop, Inheritance working group, One seat
Platform	$799 / mo	Multi-product catalogs and enclave hosts	Up to 8 listings, Eight seats, Webinar slot, Priority CRM review

Educational membership and directory. Not a CMMC assessor. Not FedRAMP. Listings are dated public records, not certifications. Prices are a starting point while the Collective's legal home is finalized.

Letter landscape

Membership tier sheet

CSP CollectiveInherit Prove HostMembership

Pay for proof, not a badge factory.

ObserverFreeOSC leads, ESP architects, students of inheritance

Directory browse
Public explainers
Intel headlines

Provider$199 / moOne authorized offering

Validated listing
Rev 2 + Rev 3 CRM workshop
Inheritance working group
One seat

Platform$799 / moMulti-product catalogs and enclave hosts

Up to 8 listings
Eight seats
Webinar slot
Priority CRM review

Prices are a starting point while the Collective's legal home is finalized. Every listing still requires validation: authorization status, in-scope services, and a CRM mapped to NIST SP 800-171 Rev 2 and Rev 3.cspcollective.org/membership

18 × 24 in

Rev 2 / Rev 3 crosswalk poster

NIST SP 800-171 family crosswalkCSP CollectiveInherit Prove Host

Rev 2to Rev 3.

110Rev 2 · 14 families

97Rev 3 · 17 families

Rev 2FamilyRev 3What changed

3.1Access Control03.01Renumbered · 22 Rev 2 requirements

3.2Awareness and Training03.02Renumbered · 3 Rev 2 requirements

3.3Audit and Accountability03.03Renumbered · 9 Rev 2 requirements

3.4Configuration Management03.04Renumbered · 9 Rev 2 requirements

3.5Identification and Authentication03.05Renumbered · 11 Rev 2 requirements

3.6Incident Response03.06Renumbered · 3 Rev 2 requirements

3.7Maintenance03.07Renumbered · 6 Rev 2 requirements

3.8Media Protection03.08Renumbered · 9 Rev 2 requirements

3.9Personnel Security03.09Renumbered · 2 Rev 2 requirements

3.10Physical Protection03.10Renumbered · 6 Rev 2 requirements

3.11Risk Assessment03.11Renumbered · 3 Rev 2 requirements

3.12Security Assessment and Monitoring03.12Renamed from Security Assessment

3.13System and Communications Protection03.13Renumbered · 16 Rev 2 requirements

3.14System and Information Integrity03.14Renumbered · 7 Rev 2 requirements

—Planning03.15New family in Rev 3

—System and Services Acquisition03.16New family in Rev 3

—Supply Chain Risk Management03.17New family in Rev 3

Rev 3 renumbers every family to a two-digit form, regroups requirements, and adds organization-defined parameters that the customer sets. Requirement-level mappings between revisions are not one-to-one. Use the NIST publications as the source of record.