System Security Plan SSP v1 1

Now that you understand your contract requirements and have properly scoped your environment, you are ready to document your environment in a System Security Plan (SSP). But just how much information do you need to include? How much SHOULD you include?
These are two very different questions, so Mike Snyder will review the basics of an SSP:
Why it’s needed for CMMC & Government Contract Compliance
Minimum requirements
Suggested additions to the SSP
What assessors look for in the SSP
Using the SSP to guide OSC participants during any security assessment.