Overview
A CMMC System Security Plan (SSP) needs to include the CUI information types processed, stored, or transmitted by the system to be documented in Section 1.4 titled "General Description of Information".
The CUI information types can be selected by specifying the "CUI Categories" relevant for each Data type Element. Then the Data Elements to be included in the SSP are selected in "Data Elements" under Project Overview.
1. CUI Information Type Selection
Navigation:
- Elements > Data > Open relevant data element
- Select "Information Types" tab
- Under CUI Categories, click "Edit Selection"
- Click the check box for each relevant category
- Click "Confirm Selection"
2. Data Element Confirmation
Navigation:
- Projects > Project > Project Overview > Data Elements, click "Start"
- Click the check box for each Data Element for which the CUI Categories should be included in Section 1.4 of the CMMC SSP
Comments
0 comments
Please sign in to leave a comment.