Converting SSPs Guide

Use Compliance → My SSPs → Convert SSP to create a separate System Security Plan in another supported framework using responses from an existing plan. Use Copy SSP when you want a separate plan in the same framework. Both workflows require manager access.

Prepare the conversion

1. Open Compliance → My SSPs and select Convert SSP.
2. Select the source under Existing SSP.
3. Enter a descriptive Name for the new plan and choose its Owner.
4. Select the destination Framework. The available choices depend on the source SSP.
5. When CMMC is selected, choose the CMMC Maturity Level.

Review and create the new SSP

1. Select Convert to open the review screen.
2. Check the source SSP, current framework, new name, owner, and target framework and level.
3. Read the response-mapping notice. Back returns to the form; Cancel leaves without creating a plan.
4. When the details are correct, select Continue to create the separate SSP.

Review the converted content

Open the new SSP from My SSPs. Requirements do not always map directly between frameworks, so responses can be incomplete or appear under a different control. Review the control text, implementation status, response, evidence, and remaining work before relying on the new plan. Confirm the artifacts and assignments needed for each control instead of assuming the conversion is a complete backup.

See the Compliance guide for related copy and conversion workflows and Requirements and controls for reviewing the plan.

Return to How to Guides

---