πΌ SA-3 SYSTEM DEVELOPMENT LIFE CYCLE
Descriptionβ
The organization: SA-3a. Manages the information system using [Assignment: organization-defined system development life cycle] that incorporates information security considerations; SA-3b. Defines and documents information security roles and responsibilities throughout the system development life cycle; SA-3c. Identifies individuals having information security roles and responsibilities; and SA-3d. Integrates the organizational information security risk management process into system development life cycle activities.
Similarβ
Similar Sections (Give Policies To)β
Sub Sectionsβ
Section | Sub Sections | Internal Rules | Policies | Flags |
---|