System Security Assessment Plan Template

The System Security Assessment Plan Template is a standardized framework developed by the EOSC-Future/Research Data Alliance’s AI Data Visitation Working Group and others to evaluate and approve the security of data visitation systems (i.e., platforms that enable controlled, temporary access to sensitive research data without transfer). The template requires an outline of team composition, assessment scope, procedures, and deliverables for evaluating system code, security documentation, and AI model safeguards against standards such as NIST SP 800-1711 and ISO/IEC 270182. The template also emphasizes code review, authentication integrity, data leakage prevention, dependency and container security, and continuous monitoring. These measures support consistent approval decisions, remediation recommendations, and final sign-off to ensure that data visitation technologies meet rigorous cybersecurity and compliance requirements. This template is recommended for future Data Visitation System Security Assessments.