security plan

{
  "id": "MLC-T-CYB-003832",
  "term": "security plan",
  "field": "Cybersecurity",
  "definition": "1. See System Security Plan.\n\n2. A formal document that provides an overview of the security requirements for an information system and describes the security controls in place or planned for meeting those requirements.\n\n3. Formal document that provides an overview of the security requirements for an information system and describes the security controls in place or planned for meeting those requirements.\n\n4. Formal document that provides an overview of the security requirements for the system and describes the security controls in place or planned for meeting those requirements.\n\n5. Formal document that provides an overview of the security requirements for the information system and describes the security controls in place or planned for meeting those requirements.\n\n6. See information system security plan.\n\n7. Formal document that provides an overview of the security requirements for an information system or an information security program and describes the security controls in place or planned for meeting those requirements.\nSee System Security Plan or Information Security Program Plan.\n\n8. Formal document that provides an overview of the security requirements for an information system or an information security program and describes the security controls in place or planned for meeting those requirements. See System Security Plan or Information Security Program Plan.\n\n9. A formal document that provides an overview of the security requirements for an information system or an information security program and describes the security controls in place or planned for meeting those requirements. The system security plan describes the system components that are included within the system, the environment in which the system operates, how the security requirements are implemented, and the relationships with or connections to other systems.\n\n10. Formal document that provides an overview of the security requirements for an information system or an information security program and describes the security controls in place or planned for meeting those requirements. The system security plan describes the system components that are included within the system, the environment in which the system operates, how the security requirements are implemented, and the relationships with or connections to other systems.\n\n11. Formal document that provides an overview of the security requirements for an information system or an information security program and describes the security controls in place or planned for meeting those requirements.\nSee System Security Plan.",
  "synonyms": [
    "information system security plan",
    "System Security Plan"
  ],
  "references": [
    "FIPS 200; NIST SP 800-53 Rev. 5; NIST SP 800-53A Rev. 5",
    "CNSSI 4009-2022 from OMB Circular A-130 (2016); NIST SP 800-128; NIST SP 800-37 Rev. 2 from OMB Circular A-130 (2016)",
    "NIST SP 800-137 from FIPS 200; NIST SP 800-30 Rev. 1; NIST SP 800-39; NISTIR 8170; NIST SP 800-82r3",
    "NIST SP 800-12 Rev. 1",
    "NIST SP 800-128",
    "NIST SP 800-37 Rev. 2",
    "NIST SP 800-30 Rev. 1; NIST SP 800-39",
    "NIST SP 800-137",
    "NIST SP 800-18r2 from NIST SP 800-53 Rev. 5; NIST SP 800-53 Rev. 5; NIST SP 800-53A Rev. 5",
    "NIST SP 800-53B",
    "NISTIR 8170",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/security-plan/"
}