Skip to main content

πŸ’Ό SA-4(2) Design and Implementation Information for Controls (M)(H)

  • Contextual name: πŸ’Ό SA-4(2) Design and Implementation Information for Controls (M)(H)
  • ID: /frameworks/fedramp-high-security-controls/sa/04/02
  • Located in: πŸ’Ό SA-4 Acquisition Process (L)(M)(H)

Description​

Require the developer of the system, system component, or system service to provide design and implementation information for the controls that includes: [FedRAMP Assignment: at a minimum to include security-relevant external system interfaces; high-level design; low-level design; source code or network and data flow diagram; [Assignment: organization-defined design and implementation information]] at [Assignment: organization-defined level of detail].

Similar​

  • Sections
    • /frameworks/nist-sp-800-53-r5/sa/04/02
  • Internal
    • ID: dec-c-65df11ae

Similar Sections (Take Policies From)​

SectionSub SectionsInternal RulesPoliciesFlags
πŸ’Ό NIST SP 800-53 Revision 5 β†’ πŸ’Ό SA-4(2) Acquisition Process _ Design and Implementation Information for Controls

Similar Sections (Give Policies To)​

SectionSub SectionsInternal RulesPoliciesFlags
πŸ’Ό FedRAMP Moderate Security Controls β†’ πŸ’Ό SA-4(2) Design and Implementation Information for Controls (M)(H)

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlags