💼 SA-3 System Development Life Cycle (L)(M)(H)

• Contextual name: 💼 SA-3 System Development Life Cycle (L)(M)(H)
• ID: /frameworks/fedramp-moderate-security-controls/sa/03
• Located in: 💼 System and Services Acquisition

Description

a. Acquire, develop, and manage the system using [Assignment: organization-defined system development life cycle] that incorporates information security and privacy considerations;

b. Define and document information security and privacy roles and responsibilities throughout the system development life cycle;

c. Identify individuals having information security and privacy roles and responsibilities; and

d. Integrate the organizational information security and privacy risk management process into system development life cycle activities.

Similar

• Sections
  • /frameworks/fedramp-high-security-controls/sa/03
• Internal
  • ID: dec-c-0d2cca86

Similar Sections (Take Policies From)

Section	Sub Sections	Internal Rules	Policies	Flags
💼 FedRAMP High Security Controls → 💼 SA-3 System Development Life Cycle (L)(M)(H)

Sub Sections

Section	Sub Sections	Internal Rules	Policies	Flags