Cybersecurity
System Security Plan (SSP)
A formal document describing how an organization implements security controls for a specific system boundary, including data types, operational environment, and how each control requirement is met. Required for FedRAMP authorization and CMMC Level 2 certification.
From the library
The full analysis on System Security Plan (SSP).
The article is where the term meets the practitioner. Read how this concept actually shows up in audit, in remediation, and in the boardroom.
Read the analysis →