system security plan

{
  "id": "MLC-T-CYB-004213",
  "term": "system security plan",
  "field": "Cybersecurity",
  "definition": "1. A document that describes how an organization meets or plans to meet the security requirements for a system. In particular, the system security plan describes the system boundary, the environment in which the system operates, how security requirements are implemented, and the relationships with or connections to other systems.\n\n2. A document that describes how an organization meets or plans to meet the security requirements for a system. In particular, the system security plan describes the system boundary, the environment in which the system operates, how the security requirements are satisfied, and the relationships with or connections to other systems.\n\n3. Formal document that provides an overview of the security requirements for an information system and describes the security controls in place or planned for meeting those requirements.\n\n4. See System Security Plan.\n\n5. Formal document that provides an overview of the security requirements for the system and describes the security controls in place or planned for meeting those requirements.\n\n6. Formal document that provides an overview of the security requirements for the information system and describes the security controls in place or planned for meeting those requirements.\n\n7. Formal document that provides an overview of the security requirements for a system and describes the security controls in place or planned for meeting those requirements.\n\n8. A formal document that provides an overview of the security requirements for an information system and describes the security controls in place or planned for meeting those requirements.\n\n9. A system document that provides an overview of the security requirements of a system and describes the controls in place to meet those requirements.\n\n10. See information system security plan.\n\n11. Formal document that provides an overview of the security requirements for an information system or an information security program and describes the security controls in place or planned for meeting those requirements.\nSee System Security Plan or Information Security Program Plan.\n\n12. Formal document that provides an overview of the security requirements for an information system or an information security program and describes the security controls in place or planned for meeting those requirements. See System Security Plan or Information Security Program Plan.\n\n13. A document that describes how an organization meets the security requirements for a system or how an organization plans to meet the requirements. In particular, the system security plan describes the system boundary; the environment in which the system operates; how the security requirements are implemented; and the relationships with or connections to other systems.\n\n14. See security plan.\n\n15. A document that describes how an organization meets the security requirements for a system or how an organization plans to meet the requirements. In particular, the system security plan describes the system boundary, the environment in which the system operates, how security requirements are implemented, and the relationships with or connections to other systems.\n\n16. Formal document that provides an overview of the security requirements for an information system or an information security program and describes the security controls in place or planned for meeting those requirements.\nSee System Security Plan.",
  "abbreviation": "SSP",
  "synonyms": [
    "information system security plan",
    "Security Plan"
  ],
  "see_also": [
    "security plan"
  ],
  "references": [
    "NIST SP 800-172A [Superseded]",
    "NIST SP 800-171Ar3; NIST SP 800-171r3",
    "FIPS 200 from NIST SP 800-18 Rev. 1; CNSSI 4009-2015 from NIST SP 800-18 Rev. 1; NIST SP 800-137 from FIPS 200; NIST SP 800-30 Rev. 1 from NIST SP 800-18; NIST SP 800-37 Rev. 1 [Superseded] from NIST SP 800-18; NIST SP 800-39 from NIST SP 800-18; NIST SP 800-53 Rev. 4 [Superseded] from NIST SP 800-18; NIST SP 800-53A Rev. 4 [Superseded] from NIST SP 800-18; NISTIR 8170 from NIST SP 800-18",
    "FIPS 200; NIST SP 800-18 Rev. 1 [Superseded]",
    "NIST SP 800-12 Rev. 1 from NIST SP 800-18",
    "NIST SP 800-128 from NIST SP 800-18; NIST SP 800-18 Rev. 1 [Superseded] from NIST SP 800-18; NIST SP 800-82 Rev. 2 [Superseded] from NIST SP 800-53",
    "NIST SP 800-82 Rev. 2 [Superseded] from NIST SP 800-18 (Adapted)",
    "NIST SP 800-128 from OMB Circular A-130; NIST SP 800-37 Rev. 2 from OMB Circular A-130 (2016)",
    "NIST SP 800-127 [Withdrawn]",
    "NIST SP 800-128; NIST SP 800-37 Rev. 2",
    "NIST SP 800-37 Rev. 1 [Superseded]; NIST SP 800-53A Rev. 4 [Superseded] from NIST SP 800-18; NIST SP 800-30 Rev. 1 from NIST SP 800-18; NIST SP 800-53 Rev. 4 [Superseded]; NIST SP 800-39 from NIST SP 800-18",
    "NIST SP 800-137 from NISTIR 7298",
    "NIST SP 800-171 Rev. 2 [Superseded]; NIST SP 800-171 Rev. 1 [Superseded]",
    "NIST SP 800-53 Rev. 5; NIST SP 800-53B; NIST SP 800-53A Rev. 5",
    "NIST SP 800-172 [Superseded]; NIST SP 800-172r3",
    "NISTIR 8170 from NIST SP 800-18",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/system-security-plan/"
}