A system security plan, or SSP, is a program created by defense contractors to meet 110 NIST 800-171 controls to achieve CMMC compliance.| PreVeil