ISM-0050 Removed History 2008 The SSP must provide the accreditation authority and certification authorities with sufficient information to assess the security of the system.