CMMC Level 1 · DefinitionSEC / DEFSSP
Definition
System Security Plan
A CMMC Level 1 term. Also written SSP.
Definition
A System Security Plan documents how an organization meets its security requirements. An SSP is not required at CMMC Level 1, and the DoD Level 1 Assessment Guide recommends one as a best practice.
The SSP requirement belongs to Level 2. At Level 1 it is optional, not a pass or fail item. The case to know is an enduring exception, which 32 CFR 170.24(b)(1)(i) assesses as MET when it is described, along with any mitigations, in the system security plan.
Term identity
- Term
- System Security Plan (SSP)
- Framework
- CMMC · Level 1
Related Definitions
Related Questions
Primary Sources
Cite This Page
“System Security Plan (SSP): CMMC Level 1 Definition.” AssessrLog, a product of ProfytAI Pte. Ltd.. https://assessrlog.com/cmmc/definitions/ssp/