There is no prescribed format or specified level of detail for system security plans.
Nist sp 800 171 system security plan template.
Documentation supplemental material cui ssp template.
Nist computer security resource center csrc.
This is a nist 800 171 system security plan ssp template which is a comprehensive document that provides an overview of nist sp 800 171 rev.
However organizations ensure that the required information in sp 800 171 requirement 3 12 4 is conveyed in those plans.
The nist sp 800 171 system security plan ssp template is a comprehensive document that provides an overview of nist sp 800 171 rev.
The guidance is designed to help the program.
There is no prescribed format or specified level of detail for system security plans.
Recommended security controls for federal information systems.
This guidance was developed to facilitate the consistent review of how the system security plan and associated plans of action address the nist sp 800 171 security requirements and the impact that the not yet implemented nist sp 800 171 security requirements have on an information system.
The controls selected or planned must be documented in a system security plan.
This document provides guidance for federal.
1 has been superseded by sp 800 171 rev.
The ssp toolkit also comes with a poam and waiver document that are required to document corrective action plans and capture deviations from nist sp 800 171 rev.
The objective of system security planning is to improve protection of information system resources.
1 system security requirements and describes controls in place or planned to meet those requirements.
In this revision they included information about a required system security plan ssp.
1 system security requirements and describes controls in place or planned to meet those requirements.
The completion of system security plans is a requirement of the office of management and budget omb circular a.
Documentation supplemental material cui ssp template.
The protection of a system must be documented in a system security plan.
Documentation supplemental material cui ssp template.
However organizations ensure that the required information in sp 800 171 requirement 3 12 4 is conveyed in those plans.
1 06 07 2018 planning note 2 21 2020.
2 and will be withdrawn in one year on february 21 2021.
All federal systems have some level of sensitivity and require protection as part of good management practice.
