Level 3
Document or reference in the system security plan the security solution selected, the rationale for the security solution, and the risk determination.