ComplianceNIST 800-53 control
NIST-SA-2 Allocation of Resources
- Framework
- NIST SP 800-53 rev5 (5.2.0)
- Family
- SA System and Services Acquisition
- Control
- SA-2
Control statement
a. Determine the high-level information security and privacy requirements for the system or system service in mission and business process planning;
b. Determine, document, and allocate the resources required to protect the system or system service as part of the organizational capital planning and investment control process; and
c. Establish a discrete line item for information security and privacy in organizational programming and budgeting documentation.
Discussion
Resource allocation for information security and privacy includes funding for system and services acquisition, sustainment, and supply chain-related risks throughout the system development life cycle.
Related
Related control · Compliance (6)
- NIST-PL-7 Concept of Operations NIST 800-53 control
- NIST-PM-11 Mission and Business Process Definition NIST 800-53 control
- NIST-PM-3 Information Security and Privacy Resources NIST 800-53 control
- NIST-SA-9 External System Services NIST 800-53 control
- NIST-SR-3 Supply Chain Controls and Processes NIST 800-53 control
- NIST-SR-5 Acquisition Strategies, Tools, and Methods NIST 800-53 control
Referenced by Compliance · has member (1)
- NIST-SA System and Services Acquisition NIST 800-53 family
Referenced by Compliance · related control (6)
- NIST-PL-7 Concept of Operations NIST 800-53 control
- NIST-PM-11 Mission and Business Process Definition NIST 800-53 control
- NIST-PM-3 Information Security and Privacy Resources NIST 800-53 control
- NIST-SA-9 External System Services NIST 800-53 control
- NIST-SR-3 Supply Chain Controls and Processes NIST 800-53 control
- NIST-SR-5 Acquisition Strategies, Tools, and Methods NIST 800-53 control