You have been hired as the Information System Security Officer (ISSO) for a US federal...

System Security Plan (SSP) Overview:

Documents the controls in place to secure a system, the type of information handled, and system interconnections.

Focuses on describing the system's security posture, not external audit results.

Why Not Other Options:

A: Controls are a core part of the SSP.

B: Connected systems must be documented for interconnection security.

D: The type of information processed is required to determine security requirements.

References:

EC-Council CISO Material on SSP Requirements.