Skip to main content

💼 SA-21 DEVELOPER SCREENING

  • ID: /frameworks/nist-sp-800-53-r4/sa/21

Description​

The organization requires that the developer of [Assignment: organization-defined information system, system component, or information system service]: SA-21a. Have appropriate access authorizations as determined by assigned [Assignment: organization-defined official government duties]; and SA-21b. Satisfy [Assignment: organization-defined additional personnel screening criteria].

Similar​

  • Internal
    • ID: dec-c-fc32de7f

Similar Sections (Give Policies To)​

SectionSub SectionsInternal RulesPoliciesFlagsCompliance
💼 NIST CSF v1.1 → 💼 PR.IP-11: Cybersecurity is included in human resources practices (e.g., deprovisioning, personnel screening)no data

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlagsCompliance
💼 SA-21 (1) VALIDATION OF SCREENINGno data