fabtotal.blogg.se

An SSP outlines the roles and responsibilities of security personnel.

“A system security plan (SSP) is a document that outlines how an organization implements its security requirements. How do you know your organization is secure? Because you do the things in your security plan.Īs for CMMC, your System Security Plan (SSP) describes how you protect sensitive information from the government such as Federal Contract Information (FCI) and Controlled Unclassified Information (CUI). This document explains the key aspects of the CMMC and how Anchor can be used to reduce the cost and effort to become CMMC certified.Ī security plan simply describes what an organization does in order to be secure.

The Cybersecurity Maturity Model Certification (CMMC) is a certification, contractors need before they can perform work for the Department of Defense.