Support
Generating the SSP and POA&M
How your answers and gaps turn into narrative documents an assessor reads.
The System Security Plan and Plan of Action & Milestones assemble automatically from a scored assessment — 110 sections written by hand, generated instead. An AI drafts the narrative prose; it never decides what a requirement means, whether you comply, or what the score is. Those are computed deterministically and would say the same thing with the model switched off.
How to use it
- Open Documents once an assessment is scored. Narrative is drafted only for requirements that actually assert something — a requirement your answers don't support gets an honest "assessed, not yet described" rather than an invented sentence.
- Every generated paragraph cites the requirement it addresses and the answer that justified it, printed directly under the section in the exported document.
- POA&M milestones get dates from the same effort estimate the gap report uses, not a number typed in after the fact.
Drafted text is not yet a fact about your company. It lands in a proposals queue and becomes part of the document only once a reviewer accepts it — see "Reviewing AI-drafted narrative."