SYSTEM SECURITY PLAN DEVELOPMENT PACKAGE
​
In this package, VAGE provides Program managers, system owners, and security personnel in organizations best practices and industry standard guidance on the development of information System Security and Privacy Plan (SSPP). Our completed SSPP product is designed to be adaptable in a variety of organizational structures and used as reference by those having assigned responsibility for activity related to security planning. This package consists of the following sub-packages that can be leveraged individually, depending on our clints’ needs:
​
-
Full System Security and Privacy Plan Development:
VAGE will build a new system security plan for the organization by working with the various system stakeholders who would provide the necessary artifacts for the effort. VAGE will complete a system categorization after examining the information types for the organization. Based on policies, laws and regulations affecting the system, VAGE will determine the minimum security requirements for the system and guide the selection of security controls. This activity will culminate with a complete document that reflects the security status of the system at a point in time. Federal system plans will mirror NIST 800-18 guidance.
​
2. Proctored System Security and Privacy Plan Development:
With this package, the system stakeholders will build their SSPP and VAGE will only audit/evaluate the completed plan and provide feedback with recommendations to fill any gaps.
​
3. System categorization and Control Selection Guidance:
For Federal clients whose systems must comply with FIPS 199/FIPS 200 requirements, VAGE walks the system stakeholders through the information type selection process (NIST 800-60) and categorizes the system using FIPS 199. Minimum security requirements are then determined based on the impact level of the system (FIPS 200), and VAGE will guide the selection of baseline controls for the system. Our guidance ends after a full catalogue of security controls for the system has been selected and documented.
​​
-
Email us at info@vagesecurity.com
​