Security Plan
What is Security Plan?
A formal document that provides an overview of the security requirements for an information system and describes the controls in place.
Terms that appear alongside security plan
Each of these is named in at least one of the same controls as security plan. The number is how many controls name both.
- facility security 7 shared controls
- nist 5 shared controls
- physical security 4 shared controls
- access control 4 shared controls
- audit 4 shared controls
- risk assessment 4 shared controls
- authentication 3 shared controls
- policy 3 shared controls
Frameworks that govern security plan
What the standards actually require on security plan
Requirements naming security plan across 6 standards, quoted from the control text.
The organization shall put a management system in place so that its own supply chain security processes can be carried out.
iso-28001-2007-supply-chain-security-management::5.5 · 5.5 Execution of the supply chain security plan →Requirement 0019 (Part One: Governance, section 3.1.1 Security Planning, Incidents and Training; applies to All entities; dated 31 October 2024; retained from Release 2025): The Accountable Authority approves the entity's security plan.
protective-security-policy-framework-pspf-release-2026::0019 · 0019 Accountable Authority approves the security plan →Develop within 120 calendar days after completing R2, and execute according to its own timeline, a documented physical security plan covering the identified stations, substations and primary control centers.
nerc-cip::CIP-014 R5 · CIP-014-3 R5: Develop and implement physical security plans →Agencies must make sure an SSP (System Security Plan) covers each of their systems.
new-zealand-information-security-manual-nzism::5.1.10.C.01 · 5.1.10.C.01 System Security Plan covering every system →Operators should develop and implement a security plan customized to the company, comprehensive in scope, systematic in development and risk-based.
tsa-pipeline-security::3.1 · 3.1 Corporate security plan: minimum content, review and protection →Each person who offers for transportation or transports any of the 172.800(b) materials (for example large bulk quantities of hazardous materials above 3,000 kg or 3,000 L, Division 1.1 to 1.3 explosives over set quantities, materials poisonous by inhalation,...
us-dot-hazardous-materials-regulations-49-cfr-parts-171-to-180::172.800-804 · Security plans: required for listed shipments, with risk assessment, personnel security, unauthorised access and en route security components, written, reviewed annually, with training and records (172.800 to 172.804) →Questions people ask about security plan
What is Security Plan?
Why is Security Plan important for compliance?
Which compliance frameworks address Security Plan?
Where can I learn more about Security Plan?
See how Security Plan applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.