System Security Plan
nounid
4340·updated May 18, 2026verified
A document that describes how an organization meets the security requirements for a system or how an organization plans to meet the requirements. In particular, the system security plan describes the system boundary, the environment in which the system operates, how security requirements are implemented, and the relationships with or connections to other systems.
polysemousMWE
Attested in
NIST SP 800-171 Rev 3 - Protecting CUI in Nonfederal Systems
03.01.20.c.103.04.04.b ¶ 103.12.02.b.3 ¶ 103.15.01.b ¶ 103.15.0203.15.02.a03.15.02.b03.15.02.c03.15.02.c ¶ 103.15.02.c ¶ 103.17.01.c ¶ 23.2.2 ¶ 1623.2.2 ¶ 163
Classifications
Entity Type
Artifact92%llm-generatedllm:claude-haiku-4-5
Sensitivity
Regulated88%llm-generatedllm:claude-haiku-4-5
Information Class
Cui75%llm-generatedllm:claude-haiku-4-5
Variants
- plural
- System Security Plans
- possessive
- System Security Plan's
- pluralpossessive
- System Security Plans'
Framework definitions
- §1
- Formal document that provides an overview of the security requirements for the information system and describes the security controls in place or planned for meeting those requirements.
- §2 · sense_2_pending_review
- The formal document prepared by the information system owner (or common security controls owner for inherited controls) that provides an overview of the security requirements for the system and describes the security controls in place or planned for meeting those requirements. The plan can also contain as supporting appendices or as references, other key security-related documents such as a risk assessment, privacy impact assessment, system interconnection agreements, contingency plan, security configurations, configuration management plan, and incident response plan.
- §1
- The formal document prepared by the information system owner (or common security controls owner for inherited controls) that provides an overview of the security requirements for the system and describes the security controls in place or planned for meeting those requirements. The plan can also contain as supporting appendices or as references, other key security-related documents such as a risk assessment, privacy impact assessment, system interconnection agreements, contingency plan, security configurations, configuration management plan, and incident response plan.
- §1
- Formal document that provides an overview of the security requirements for the information system and describes the security controls in place or planned for meeting those requirements.
- §1
- Formal document that provides an overview of the security requirements for the information system and describes the security controls in place or planned for meeting those requirements.
- §1
- Formal document that provides an overview of the security requirements for the information system and describes the security controls in place or planned for meeting those requirements.
- §1
- Formal document that provides an overview of the security requirements for the information system and describes the security controls in place or planned for meeting those requirements.
- §1
- Formal document that provides an overview of the security requirements for the information system and describes the security controls in place or planned for meeting those requirements.
- §1 · glossary
- A document that describes how an organization meets the security requirements for a system or how an organization plans to meet the requirements. In particular, the system security plan describes the system boundary, the environment in which the system operates, how security requirements are implemented, and the relationships with or connections to other systems.Attribution from the CKI glossary mapping stage (glossary)
- §1 · glossary
- A document that describes how an organization meets or plans to meet the security requirements for a system. In particular, the system security plan describes the system boundary, the environment in which the system operates, how the security requirements are satisfied, and the relationships with or connections to other systems.Attribution from the CKI glossary mapping stage (glossary)
- §1 · legacy_primary
- The formal document prepared by the information system owner (or common security controls owner for inherited controls) that provides an overview of the security requirements for the system and describes the security controls in place or planned for meeting those requirements. The plan can also contain as supporting appendices or as references, other key security-related documents such as a risk assessment, privacy impact assessment, system interconnection agreements, contingency plan, security configurations, configuration management plan, and incident response plan.DR-088 backfill from the noun definition column
Outgoing relationships
No outgoing triples
This term is not the subject of any RDF-style relationship yet.
Incoming relationships
No incoming triples
No other term currently asserts a relationship to this one.