A System Security Plan (SSP) is a comprehensive document that outlines the security controls and measures implemented for an information system to protect its data and operations. It serves as a blueprint for security management, ensuring compliance with regulatory requirements and facilitating risk management and incident response.