Security Plan

Formal document that provides an overview of the security requirements for an information system or an information security program and describes the security controls in place or planned for meeting those requirements.

See ‘System Security Plan’ or ‘Information Security Program Plan.
SOURCE: SP 800-53; SP 800-53A; SP 800-37; SP 800-18