ComplianceNIST 800-53 enhancement
NIST-SA-17(2) Security-relevant Components
- Framework
- NIST SP 800-53 rev5 (5.2.0)
- Family
- SA System and Services Acquisition
- Control
- SA-17(2)
Control statement
Require the developer of the system, system component, or system service to:
(a) Define security-relevant hardware, software, and firmware; and
(b) Provide a rationale that the definition for security-relevant hardware, software, and firmware is complete.
Discussion
The security-relevant hardware, software, and firmware represent the portion of the system, component, or service that is trusted to perform correctly to maintain required security properties.
Related
Enhancement of · Compliance (1)
- NIST-SA-17 Developer Security and Privacy Architecture and Design NIST 800-53 control
Related control · Compliance (2)
- NIST-AC-25 Reference Monitor NIST 800-53 control
- NIST-SA-5 System Documentation NIST 800-53 control