System security plan

Prepared By:

System Identification

System Name/Title

Responsible Organization

Information Contact(S)

Assignment of Security Responsibility

System Operational Status

General Description/Purpose

System Environment

System Interconnection/Information Sharing

Laws, Regulations, and Policies Affecting the System

Sensitivity of Information Handled

General Description of Sensitivity

Management Controls

Risk Assessment and Management

Review of Security Controls

Rules of Behavior

Planning for Security in the Life Cycle

Initiation Phase

Development/Acquisition Phase

Implementation Phase

Operation/Maintenance Phase

Disposal Phase

Authorized Processing

Operational Controls

Personnel Security

Physical and Environmental Protection

Production, Input/Output Controls

Contingency Planning

Maintenance Controls

Data Integrity/Validation Controls

Documentation

Security Awareness and Training

Incident Response Capability

Technical Controls

Identification and Authentication

Authorization/Access Controls

Public Access Controls

Audit Trails

© 2018. Grand Canyon University. All Rights Reserved.

© 2017. Grand Canyon University. All Rights Reserved.