System Security Authorization Agreement

Overview
The System Security Authorization Agreement (SSAA) is

"[a] formal document that fully describes the planned security tasks required to meet system or network security requirements. The package must contain all information necessary to allow the Designated Approving Authority (DAA) to make an official management determination for authorization for a system or site to operate in a particular security mode of operation; with a prescribed set of safeguards; against a defined threat with stated vulnerabilities and countermeasures; in a given operational environment; under a stated operational concept; with stated interconnections to external systems; and at an acceptable level of risk."