Understand the Mandate

As a defense contractor, compliance is not optional. Below are the official U.S. Government directives that require you to have a System Security Plan (SSP).