System Security Plan (SSP)

The purpose of the SSP is to provide information regarding the security approach, controls, standards, and guidelines for CWS-CARES. This document will follow the National Institute of Standards (NIST) framework for creation of the plan. It will establish a minimum set of controls that are required in the CWS-CARES system, assigns responsibilities for the security of information assets; and provides a consolidated repository of information that incorporates Federal, State, Departmental, and County information security guidance. The controls discussed in this document are presented as standard operating procedures and guidelines used by CWS-CARES project management, system administrators, system developers, users, and all state/county/vendor personnel to comply with the various security policies and administration directives pertaining to the operation of the CWS-CARES application.