FedRAMP Rev 5 P.2: P.2 System security plan quality

The SSP is the security blueprint that lets a reviewer follow the architecture, data flows, control implementations and boundary and understand how federal data moves to, from and within the system, where it is processed and stored and how it is protected; one SSP template serves each baseline with controls in Appendix A, and the SSP describes the FIPS 199 categorization, service and deployment models, function, architecture, boundary, data flows, interconnections, leveraged external services and cryptographic modules to the level of detail the instructional text requires. Documents are accepted on criteria of clarity (logical order, current dates, defined terms, no ambiguity, correct grammar, legible figures), completeness (accurate detailed content, all template sections, attachments and appendices, tables of contents), conciseness and consistency (format, numbering, terminology, level of detail, no contradiction with predecessor documents, figures agreeing with text); a strong technical writer is essential.