ASD's Blueprint for Secure Cloud

System Security Plan Annex

This page provides a template and guidance to assist organisations in preparing a System Security Plan Annex (SSP-A) describing how they have addressed controls from ASD's Information Security Manual (ISM) in the context of system(s) built on ASD's Blueprint for Secure Cloud.

Estimated reading time: 1 minute

The System Security Plan Annex (SSP-A) for <SYSTEM-NAME> covers both applicable controls from this document and any additional controls that have been identified. The completed SSP-A for <SYSTEM-NAME> can be found at System Security Plan Annex.

Do you have a suggestion on how the above page could be improved? Get in touch! ASD's Blueprint for Secure Cloud is an open source project, and we would love to get your input. Submit an issue on our GitHub, or send us an email at

Acknowledgement of Country icon

Acknowledgement of Country
We acknowledge the Traditional Owners and Custodians of Country throughout Australia and their continuing connections to land, sea and communities. We pay our respects to them, their cultures and their Elders; past, present and emerging. We also recognise Australia's First Peoples' enduring contribution to Australia's national security.

Authorised by the Australian Government, Canberra