💼 SA-15(8) Development Process, Standards, and Tools | Reuse of Threat and Vulnerability Information

• ID: /frameworks/nist-sp-800-53-r5/sa/15/08

Description

Require the developer of the system, system component, or system service to use threat modeling and vulnerability analyses from similar systems, components, or services to inform the current development process.

Similar

• Sections
  • /frameworks/aws-fsbp-v1.0.0/guardduty/01
  • /frameworks/aws-fsbp-v1.0.0/ssm/01
• Internal
  • ID: dec-c-5a22535d

Similar Sections (Take Policies From)

Section	Sub Sections	Internal Rules	Policies	Flags	Compliance
💼 AWS Foundational Security Best Practices v1.0.0 → 💼 [GuardDuty.1] GuardDuty should be enabled			1		no data
💼 AWS Foundational Security Best Practices v1.0.0 → 💼 [SSM.1] Amazon EC2 instances should be managed by AWS Systems Manager					no data

Similar Sections (Give Policies To)

Section	Sub Sections	Internal Rules	Policies	Flags	Compliance
💼 NIST CSF v2.0 → 💼 ID.RA-01: Vulnerabilities in assets are identified, validated, and recorded			31		no data

Sub Sections

Section	Sub Sections	Internal Rules	Policies	Flags	Compliance

Policies (1)

Policy	Logic Count	Flags	Compliance
🛡️ AWS GuardDuty is not enabled in all regions🟢	1	🟢 x6	no data