System Security Plan (ssp) Categorization: Moderate-Low-Low

5Key Roles and Responsibilities

Instruction (DELETE IN FINAL DOCUMENT): Add, modify or delete the roles and responsibilities below as required for the specific organization. Detailed information regarding the requirements for each of these roles is further defined in the DAA PM.

5.1Risk Management

Delegated Authorizing Official (DAO)

Name: Click here to enter text.

Organization: Click here to enter text.

Address: Click here to enter text.

Phone: Click here to enter text.

Email: Click here to enter text.

Delegated AO-Representative (DAO-R)

Name: Click here to enter text.

Organization: Click here to enter text.

Address: Click here to enter text.

Phone: Click here to enter text.

Email: Click here to enter text.

System Certifying Authority (SCA)

Name: Click here to enter text.

Organization: Click here to enter text.

Address: Click here to enter text.

Phone: Click here to enter text.

Email: Click here to enter text.

Information Owner/Steward

Name: Click here to enter text.

Organization: Click here to enter text.

Address: Click here to enter text.

Phone: Click here to enter text.

Email: Click here to enter text.

Information System Owner (ISO)/Program Manager (PM)

Name: Click here to enter text.

Organization: Click here to enter text.

Address: Click here to enter text.

Phone: Click here to enter text.

Email: Click here to enter text.

5.2 IA Support Personnel

Instruction (DELETE IN FINAL DOCUMENT): The site maintains copies of the IA Appointment Letters for all IA Personnel on file available for review. Additional IA personnel, such as the Information Assurance Support Officer (IASO) may be added.


Information System Security Manager (ISSM)

Name: Click here to enter text.

Organization: Click here to enter text.

Address: Click here to enter text.

Phone: Click here to enter text.

Email: Click here to enter text.

8570 Profile Click here to enter text.

8570 Baseline Certification Click here to enter text.

System Administrator/Network Administrator (SA/NA)

Name: Click here to enter text.

Organization: Click here to enter text.

Address: Click here to enter text.

Phone: Click here to enter text.

Email: Click here to enter text.

Data Transfer Agent (DTA)/Trusted Download

Name: Click here to enter text.

Organization: Click here to enter text.

Address: Click here to enter text.

Phone: Click here to enter text.

Email: Click here to enter text.

Transfer Risk Level (High or Low): Click here to enter text.

6System Environment

6.1Physical Environment

NIST 800-53/DAA PM Reference:	PE-3
Is the secure facility accredited or approved to process and store information at the level covered by this SSP?	 Yes  No
Who accredited or approved the facility?	Organization: Name:
Indicate if the facility is a Closed, or Restricted Area.	 Closed Date of Approval Click here to enter text.  Restricted Date of Approval Click here to enter text.  Both Date of Approval Click here to enter text.
State the classification level approved for the facility, as well as any caveats applied to the information.	 Secret  Top Secret	 NATO  RD		Others  COMSEC 
Is the system approved for unattended processing?	 Yes  No
Is the facility approved for 24-hour operation?	 Yes  No
Is the facility approved for Open or Closed storage?	 Opened  Closed
List all items approved for Open Storage:	Click here to enter text.
List all items restricted to Closed Storage:	Click here to enter text.
Are classified and lower classified systems co-located within the facility? (If yes, complete the box to the right.)	 NIPRNet/NMCI/Internet  SIPRNet  JWICS		Others  _______________  _______________
If there are co-located systems, what is the date of their ATO? (Retain copies of the co-located system ATOs on file.)	Click here to enter text. System Click here to enter text. System Click here to enter text.		Others Click here to enter text. _______________
Is a PDS required to support this connection	 Yes  No		Approval Date: