background

System Security Plan (SSP)

A System Security Plan (SSP) is a comprehensive document that describes how an organization implements security controls to protect federal data.

  • glossaryangle-right
  • What is a System Security Plan (SSP)?

What is a System Security Plan (SSP)?

A System Security Plan (SSP) is a comprehensive document that describes how an organization implements security controls to protect federal data. It includes details on system architecture, security policies, risk management strategies, and compliance with requirements for the framework(s) they’re pursuing, such as NIST 800-53, NIST 800-171, CMMC, and FedRAMP. The SSP is a critical part of the CMMC certification and FedRAMP authorization process and should be regularly updated to reflect changes in security posture.