💼 SA-17 (1) FORMAL POLICY MODEL
- Contextual name: 💼 SA-17 (1) FORMAL POLICY MODEL
- ID:
/frameworks/nist-sp-800-53-r4/sa/17/01 - Located in: 💼 SA-17 DEVELOPER SECURITY ARCHITECTURE AND DESIGN
Description​
The organization requires the developer of the information system, system component, or information system service to: SA-17 (1)(a) Produce, as an integral part of the development process, a formal policy model describing the [Assignment: organization-defined elements of organizational security policy] to be enforced; and SA-17 (1)(b) Prove that the formal policy model is internally consistent and sufficient to enforce the defined elements of the organizational security policy when implemented.
Similar​
- Internal
- ID:
dec-c-0cb779df
- ID:
Sub Sections​
| Section | Sub Sections | Internal Rules | Policies | Flags |
|---|