System and Services Acquisition
GPTKB entity
Statements (25)
| Predicate | Object |
|---|---|
| gptkbp:instanceOf |
gptkb:NIST_SP_800-53_Control_Family
|
| gptkbp:abbreviation |
SA
|
| gptkbp:appliesTo |
federal information systems
|
| gptkbp:focusesOn |
acquisition of information systems
acquisition of services |
| https://www.w3.org/2000/01/rdf-schema#label |
System and Services Acquisition
|
| gptkbp:includesControl |
SA-1 Policy and Procedures
SA-10 Developer Configuration Management SA-11 Developer Security Testing and Evaluation SA-12 Supply Chain Protection SA-15 Development Process, Standards, and Tools SA-2 Allocation of Resources SA-3 System Development Life Cycle SA-4 Acquisition Process SA-5 Information System Documentation SA-8 Security Engineering Principles SA-9 External Information System Services |
| gptkbp:partOf |
gptkb:NIST_SP_800-53
|
| gptkbp:publishedBy |
gptkb:National_Institute_of_Standards_and_Technology
|
| gptkbp:purpose |
ensure security is considered in system and service acquisition
|
| gptkbp:relatedTo |
gptkb:Risk_Management_Framework
gptkb:Federal_Information_Security_Modernization_Act |
| gptkbp:bfsParent |
gptkb:Security_and_Privacy_Controls_for_Information_Systems_and_Organizations
gptkb:NIST_800-53 |
| gptkbp:bfsLayer |
7
|