💼 SA-3 SYSTEM DEVELOPMENT LIFE CYCLE

• ID: /frameworks/nist-sp-800-53-r4/sa/03

Description

The organization: SA-3a. Manages the information system using [Assignment: organization-defined system development life cycle] that incorporates information security considerations; SA-3b. Defines and documents information security roles and responsibilities throughout the system development life cycle; SA-3c. Identifies individuals having information security roles and responsibilities; and SA-3d. Integrates the organizational information security risk management process into system development life cycle activities.

Similar

• Internal
  • ID: dec-c-0496850e

Similar Sections (Give Policies To)

Section	Sub Sections	Internal Rules	Policies	Flags	Compliance
💼 NIST CSF v1.1 → 💼 PR.IP-2: A System Development Life Cycle to manage systems is implemented		6	9		no data

Sub Sections

Section	Sub Sections	Internal Rules	Policies	Flags	Compliance