💼 SA-15(3) Criticality Analysis (M)(H)

• ID: /frameworks/fedramp-moderate-security-controls/sa/15/03

Description

Require the developer of the system, system component, or system service to perform a criticality analysis:

(a) At the following decision points in the system development life cycle: [Assignment: organization-defined decision points in the system development life cycle]; and

(b) At the following level of rigor: [Assignment: organization-defined breadth and depth of criticality analysis].

Similar

• Internal
  • ID: dec-c-9157e8aa

Sub Sections

Section	Sub Sections	Internal Rules	Policies	Flags	Compliance