Executive Summary This document details the System Security Plan (SSP) for the <Information System Name> security controls. This System Security Plan was written in accordance with National Institute of Standards and Technology (NIST) Special Publication (SP) 800-18, Revision 1, Guide for Developing Security Plans for Information Technology Systems. <Company Name> is a <privately/publicly> owned company headquartered in <City, State>. Completion of this SSP, which describes how U.S. federal information will be safeguarded, is a requirement of the Office of Management and Budget (OMB) Circular A-130, Management of Federal Information Resources, Appendix III, Security of Federal Automated Information Resources, and Public Law 100-235, the Computer Security Act of 1987. Document Revision History Version Date Description of Author System 05/17/2012 Initial Publication N/A FedRAMP Office 06/06/2012 Changed Numbering in Instruction Statement §9.3. N/A FedRAMP Office 06/13/2012 Formatting AC-17(7). N/A FedRAMP Office 06/18/2012 Updated RA-5a. N/A FedRAMP Office 06/18/2012 Added RA-5(5). N/A FedRAMP Office Table of Contents Updated; Added Instruction to §9.3; Revised Signature Pages; Revised Tables 6-1 7/23/2012 N/A FedRAMP Office and 6-2; Updated Instruction for §7.0; Updated Instruction for §9.4. 07/25/2012 Removed CP-9d. N/A FedRAMP Office Revised formatting for CM-3(g); Added two rows (h 10/15/2012 N/A FedRAMP Office and i) to IA-5 table on p. 185. Part c removed from CM-2(5). Revised AC-16 to 12/5/2012 N/A FedRAMP Office include missing text.
Executive Summary This document details the System Security Plan (SSP) for the <Information System Name> security controls. This System Security Plan was written in accordance with National Institute of Standards and Technology (NIST) Special Publication (SP) 800-18, Revision 1, Guide for Developing Security Plans for Information Technology Systems. <Company Name> is a <privately/publicly> owned company headquartered in <City, State>. Completion of this SSP, which describes how U.S. federal information will be safeguarded, is a requirement of the Office of Management and Budget (OMB) Circular A-130, Management of Federal Information Resources, Appendix III, Security of Federal Automated Information Resources, and Public Law 100-235, the Computer Security Act of 1987. Document Revision History Date Description Version of System Author 05/17/2012 Initial Publication N/A FedRAMP Office 06/06/2012 Changed Numbering in Instruction Statement §9.3. N/A FedRAMP Office 06/13/2012 Formatting AC-17(7). N/A FedRAMP Office 06/18/2012 Updated RA-5a. N/A FedRAMP Office 06/18/2012 Added RA-5(5). N/A FedRAMP Office 7/23/2012 Table of Contents Updated; Added Instruction to §9.3; Revised Signature Pages; Revised Tables 6-1 and 6-2; Updated Instruction for §7.0; Updated Instruction for §9.4. N/A FedRAMP Office 07/25/2012 Removed CP-9d. N/A FedRAMP Office 10/15/2012 Revised formatting for CM-3(g); Added two rows (h and i) to IA-5 table on p. 185. N/A FedRAMP Office 12/5/2012 Part c removed from CM-2(5). Revised AC-16 to include missing text. N/A FedRAMP Office
FedRAMP_Template.docx