System Security Plan Template

• Appendix B Provides A Glossary Of Terms And Definitions.

Use this downloadable ssp template to develop an ssp for your organization. Specific system data shall be entered in the template when a colon symbol is indicated. 1 system security requirements and describes controls in place or planned to meet those requirements. Enter data to the right of the colon symbol.

The Nist Computer Security Resource Center Provides Resources And Templates For Developing Security Plans To Protect Controlled Unclassified Information (Cui) In Nonfederal Systems.

• appendix a provides a system security plan template. The system security plan (ssp) documents controls that are implemented and tested to provide protection from threats and vulnerabilities identified during the planning and review process. The objective of system security planning is to improve protection of information system resources. It can be used for both public and private sector systems and applications, and it provides a baseline for developing an ssp.

• Appendix C Includes References That Support This Publication.

System security plan (ssp) template instructions. This template contains boiler plate language. This includes all the system’s hardware, software, relevant personnel, etc. The system security plan describes the controls in place, or planned for implementation, to provide a level of security appropriate for the information to be transmitted, processed, or stored by a system.

Each Template Must Be Customized To Specifically Address The System.

More information about ssps can be found on the nist website. All federal systems have some level of sensitivity and require protection as part of good management practice. Develop, document, and periodically update system security plans that describe system boundaries, system environments of operation, how security requirements are implemented, and the relationships with or connections to other systems.