The main document document to provide in the authorization process is the System Security Plan (SSP):

• A system security plan or SSP is a document that identifies the functions and features of a system, including all its hardware and the software installed on the system. This document also defines the security measures that have been or will be soon put in place to limit access to authorized users, as well as to train managers, users and systems administrators in the secure use of the system. It includes details of processes for auditing and maintaining the system, in addition to information about how you plan to respond to security incidents that occur on the network.
• The System Security Plan model allows the security implementation of an information system to be defined using an OSCAL profile (or baseline) as the basis for the system's control implementation. OSCAL-based SSPs are expressed in machine-readable formats that can be easily imported into a tool, allowing for increased automation of SSP validation and system assessment. An OSCAL SSP can also be transformed from the machine-readable form to a human-readable version.
• Plan of Milestone and Actions:

  This plan defines the remedation processes that the Information System Security Officers to undertake to address all issues highlighted in the System Security Results(SAR).