CMMC Level 1 · DefinitionSEC / DEFSSP
Definition
System Security Plan
A CMMC Level 1 term. Also written SSP.
Definition
A System Security Plan documents how an organization meets its security requirements. An SSP is not required at CMMC Level 1, though many suppliers keep a short one because it helps.
The SSP requirement belongs to Level 2. At Level 1 it is optional, not a pass or fail item.
Term identity
- Term
- System Security Plan (SSP)
- Framework
- CMMC · Level 1
- Authority
- 32 CFR § 170.15