Accreditation Package
CNSSI 4009
Product comprised of a System Security Plan (SSP) and a report documenting the basis for the accreditation decision.
NIST SP 800-37
The evidence provided to the authorizing official to be used in the security accreditation decision process. Evidence includes, but is not limited to: (i) the system security plan; (ii) the assessment results from the security certification; and (iii) the plan of action and milestones.