💼 SA-1 SYSTEM AND SERVICES ACQUISITION POLICY AND PROCEDURES
- ID:
/frameworks/nist-sp-800-53-r4/sa/01
Stats​
not available
Description​
The organization: SA-1a. Develops, documents, and disseminates to [Assignment: organization-defined personnel or roles]: SA-1a.1. A system and services acquisition policy that addresses purpose, scope, roles, responsibilities, management commitment, coordination among organizational entities, and compliance; and SA-1a.2. Procedures to facilitate the implementation of the system and services acquisition policy and associated system and services acquisition controls; and SA-1b. Reviews and updates the current: SA-1b.1. System and services acquisition policy [Assignment: organization-defined frequency]; and SA-1b.2. System and services acquisition procedures [Assignment: organization-defined frequency].
Similar​
- Internal
- ID:
dec-c-6ef32067
- ID:
Similar Sections (Give Policies To)​
| Section | Sub Sections | Internal Rules | Policies | Flags | Compliance |
|---|---|---|---|---|---|
| 💼 NIST CSF v1.1 → 💼 ID.GV-1: Organizational cybersecurity policy is established and communicated | no data | ||||
| 💼 NIST CSF v1.1 → 💼 ID.GV-3: Legal and regulatory requirements regarding cybersecurity, including privacy and civil liberties obligations, are understood and managed | 1 | 4 | no data |
Sub Sections​
| Section | Sub Sections | Internal Rules | Policies | Flags | Compliance |
|---|