ComplianceNIST 800-53 enhancement

NIST-SA-10(6) Trusted Distribution

Official page ↗
Framework
NIST SP 800-53 rev5 (5.2.0)
Family
SA System and Services Acquisition
Control
SA-10(6)

Control statement

Require the developer of the system, system component, or system service to execute procedures for ensuring that security-relevant hardware, software, and firmware updates distributed to the organization are exactly as specified by the master copies.

Discussion

The trusted distribution of security-relevant hardware, software, and firmware updates help to ensure that the updates are correct representations of the master copies maintained by the developer and have not been tampered with during distribution.

Related

Enhancement of · Compliance (1)

  • NIST-SA-10 Developer Configuration Management NIST 800-53 control