System Security Plan Template

The System Security Plan (Ssp) Documents Controls That Are Implemented And Tested To Provide Protection From Threats And Vulnerabilities Identified During The Planning And Review Process.

This includes all the system’s hardware, software, relevant personnel, etc. The objective of system security planning is to improve protection of information system resources. All federal systems have some level of sensitivity and require protection as part of good management practice. System security plan (ssp) template instructions.

Specific System Data Shall Be Entered In The Template When A Colon Symbol Is Indicated.

Enter data to the right of the colon symbol. • appendix b provides a glossary of terms and definitions. It can be used for both public and private sector systems and applications, and it provides a baseline for developing an ssp. More information about ssps can be found on the nist website.

1 System Security Requirements And Describes Controls In Place Or Planned To Meet Those Requirements.

The system security plan describes the controls in place, or planned for implementation, to provide a level of security appropriate for the information to be transmitted, processed, or stored by a system. Develop, document, and periodically update system security plans that describe system boundaries, system environments of operation, how security requirements are implemented, and the relationships with or connections to other systems. This template contains boiler plate language. Use this downloadable ssp template to develop an ssp for your organization.

Each Template Must Be Customized To Specifically Address The System.

• appendix a provides a system security plan template. • appendix c includes references that support this publication. The nist computer security resource center provides resources and templates for developing security plans to protect controlled unclassified information (cui) in nonfederal systems.