Skip to main content

πŸ’Ό SA-21 DEVELOPER SCREENING

Description​

The organization requires that the developer of [Assignment: organization-defined information system, system component, or information system service]: SA-21a. Have appropriate access authorizations as determined by assigned [Assignment: organization-defined official government duties]; and SA-21b. Satisfy [Assignment: organization-defined additional personnel screening criteria].

Similar​

  • Internal
    • ID: dec-c-fc32de7f

Similar Sections (Give Policies To)​

SectionSub SectionsInternal RulesPoliciesFlags
πŸ’Ό NIST CSF v1.1 β†’ πŸ’Ό PR.IP-11: Cybersecurity is included in human resources practices (e.g., deprovisioning, personnel screening)

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlags
πŸ’Ό SA-21 (1) VALIDATION OF SCREENING