ComplianceNIST 800-53 enhancement

NIST-SA-3(1) Manage Preproduction Environment

Official page ↗
Framework
NIST SP 800-53 rev5 (5.2.0)
Family
SA System and Services Acquisition
Control
SA-3(1)

Control statement

Protect system preproduction environments commensurate with risk throughout the system development life cycle for the system, system component, or system service.

Discussion

The preproduction environment includes development, test, and integration environments. The program protection planning processes established by the Department of Defense are examples of managing the preproduction environment for defense contractors. Criticality analysis and the application of controls on developers also contribute to a more secure system development environment.

Related

Enhancement of · Compliance (1)

  • NIST-SA-3 System Development Life Cycle NIST 800-53 control

Related control · Compliance (5)

  • NIST-CM-2 Baseline Configuration NIST 800-53 control
  • NIST-CM-4 Impact Analyses NIST 800-53 control
  • NIST-RA-3 Risk Assessment NIST 800-53 control
  • NIST-RA-9 Criticality Analysis NIST 800-53 control
  • NIST-SA-4 Acquisition Process NIST 800-53 control