Fedramp Ssp Template

This system security plan provides an overview of the security requirements for the information system name enter information system abbreviation and describes the controls in place or planned for implementation to provide a level of security appropriate for the information to be transmitted processed or stored by the system.

Fedramp ssp template. Fedramp ssp template include text fields that allow the user to enter frequently repeated text csp name information system name etc once and automatically inserted everywhere it is used throughout the document tables except for control summary information tables include prompted data fields choice menus and drop down date pickers. System security plan approvals. Fedramp provides an ssp template for each of its baselines. The fedramp program management office pmo mission is to promote the adoption of secure cloud services across the federal government by providing a standardized approach to security and risk assessment.

Renamed document from fedramp system security plan ssp low baseline master template to fedramp system security plan ssp low baseline template 662017. Fedramp facilitates the shift from insecure tethered tedious it to secure mobile nimble and quick it. Web applications should log all admin activity authentication checks authorization checks data deletions data access data changes and permission change. Low moderate and high.

This system security plan ssp provides an overview of the security requirements for the system name acronym and describes the controls in place or planned for implementation to provide a level of security appropriate for the information to be transmitted processed or stored by the system. The fedramp ssp moderate baseline template provides the fedramp moderate baseline security control requirements for moderate impact cloud systems. Fedramp templates that reference fedramp laws and regulations standards and guidance412. Federal information will be safeguarded is a requirement of the office of management and budget omb circular a 130 management of federal information resources appendix iii security of federal automated information resources and public law 100 235 the computer security act of 1987.

Fedramp system security plan ssp high baseline template. Cloud service provider signatures. The template provides the framework to capture the system environment system responsibilities and the current status of the moderate baseline controls required for the system. Agency aos or designees are responsible for reviewing and approving the ssps ensuring the appropriate level of detail and the implementation of controls is acceptable both at time of assessment and during conmon.

Revised controls for language consistency updated section 23 and attachment 3 added guidance to sa 9 updated requirements in ra 5.