Accreditation Package

CNSSI 4009

Product comprised of a System Security Plan (SSP) and a report documenting the basis for the accreditation decision.

NIST SP 800-37

The evidence provided to the authorizing official to be used in the security accreditation decision process. Evidence includes, but is not limited to: (i) the system security plan; (ii) the assessment results from the security certification; and (iii) the plan of action and milestones.