💼 SA-11(5) Developer Testing and Evaluation | Penetration Testing

• ID: /frameworks/nist-sp-800-53-r5/sa/11/05

Description

Require the developer of the system, system component, or system service to perform penetration testing: (a) At the following level of rigor: [Assignment: organization-defined breadth and depth of testing]; and (b) Under the following constraints: [Assignment: organization-defined constraints].

Similar

• Internal
  • ID: dec-c-9abdd294

Sub Sections

Section	Sub Sections	Internal Rules	Policies	Flags	Compliance