System Security Plan (SSP) Template

IT IS PROHIBITED TO DISCLOSE THIS DOCUMENT TO THIRD-PARTIES WITHOUT AN EXECUTED NON-DISCLOSURE AGREEMENT (NDA) System Security PLAN (SSP) ACME Consulting, LLC SCOPING: Name of System : [name of contractor s internal, unclassified information System the SSP addresses] DUNS #: [contractor s DUNS #] Contract #: [contractor s contract # or other type of agreement description] CAGE Code #: [contractors CAGE code #] DISTRIBUTION: [list who this SSP is distributed to ( , contracting official, prime contractors, etc.)] REVISION DATE: [list the date of the last revision] Page 2 of 133 IT IS PROHIBITED TO DISCLOSE THIS DOCUMENT TO THIRD-PARTIES WITHOUT AN EXECUTED NON-DISCLOSURE AGREEMENT (NDA) TABLE OF CONTENTS PREPARED BY & RECORD OF CHANGES 4 PREPARED BY 4 REVISION HISTORY 4 OWNERSHIP & CYBERSECURITY OVERVIEW 5 CONTRACTS CONTAINING CUI 5 System IDENTIFICATION - CUI OVERVIEW 5 KEY STAKEHOLDERS 5 DOCUMENTATION REPOSITORY 6 DATA PROTECTION CONSIDERATIONS 6 ADDITIONAL COMPLIANCE REQUIREMENTS 6 System ENVIRONMENT 8 OPERATING MODEL 8 INTERCONNECTIVITY OVERVIEW 9 IDENTIFICATION & AUTHENTICATION OVERVIEW 9 System COMPONENTS & NETWORK BOUNDARIES 9 ROLES & PRIVILEGES 12 SUPPLY

IT IS PROHIBITED TO DISCLOSE THIS DOCUMENT TO THIRD -PARTIES Page 3 of 133 WITHOUT AN EXECUTED NON-DISCLOSURE AGREEMENT (NDA) INSTRUCTION ON FILLING OUT THE SSP TEMPLATE. It is important to understand that there is no officially-sanctioned format for a System Security Plan (SSP) to meet NIST 800-171

Loading..

Tags:

  Disclosures

Information

Related search queries