Hello everyone,

I am working in Germany on the implementation of NIST SP 800-53.

If I understand it correctly, control PL02 requires that a system security plan is available for each IT system.

I have never encountered a system security plan from my experience in Germany.

Is there a list of examples of known IT systems that I could use as a guide when creating the system security plans?

In other words, i am looking for a template or some guidance for a system security plan?

Help would be appreciated!