💼 SA-9(1) Risk Assessments and Organizational Approvals (M)(H)

• Contextual name: 💼 SA-9(1) Risk Assessments and Organizational Approvals (M)(H)
• ID: /frameworks/fedramp-moderate-security-controls/sa/09/01
• Located in: 💼 SA-9 External System Services (L)(M)(H)

Description

(a) Conduct an organizational assessment of risk prior to the acquisition or outsourcing of information security services; and

(b) Verify that the acquisition or outsourcing of dedicated information security services is approved by [Assignment: organization-defined personnel or roles].

Similar

• Sections
  • /frameworks/fedramp-high-security-controls/sa/09/01
• Internal
  • ID: dec-c-d80bb49b

Similar Sections (Take Policies From)

Section	Sub Sections	Internal Rules	Policies	Flags
💼 FedRAMP High Security Controls → 💼 SA-9(1) Risk Assessments and Organizational Approvals (M)(H)

Sub Sections

Section	Sub Sections	Internal Rules	Policies	Flags