Your workbook is ready.
Download it below, and we’ve sent a copy to your inbox so you can find it again later. It’s a fillable PDF — work through it on screen, or print it and mark it up with your team.
Download the workbookNothing in your inbox after a couple of minutes? Check your spam folder, or email us and we’ll send it again.
Three things that make the difference.
Most people open a workbook like this at page 4 and start listing systems. That’s the wrong end. Ten minutes of setup saves you redoing the whole thing.
Read pages 2 and 3 first
The four principles at the front are what stop you drawing a boundary you can’t defend later. They take five minutes and they change every answer that follows.
Inventory before you draw
Find where the CUI actually is before sketching the enclave. Teams who draw first end up designing a boundary around where they assumed the data lived.
Don’t do section 5 alone
Flow-down and third-party scoping needs whoever owns your contracts and your vendor list. It’s the section that most often uncovers scope nobody knew about.
Two things worth doing once you’ve scoped it.
Scope tells you what you have to protect. These tell you how far you have to go — and neither one costs anything.
Score what’s inside the boundary
Once you know what’s in scope, the SPRS Score Calculator tells you where you actually stand against all 110 NIST SP 800-171 requirements — and which gaps move your score most.
Get the calculatorHave someone check your work
Bring your filled-in boundary to a scoping session and we’ll tell you where it would hold up and where it wouldn’t — including if the honest answer is that you’ve got this.
Book a scoping session