Under active development Content is continuously updated and improved

RA-2Security Categorization

>Control Description

Security categorization is critical to C-SCRM at Levels 1, 2, and 3. In addition to [FIPS 199] categorization, security categorization for C-SCRM should be based on the criticality analysis that is performed as part of the SDLC. See Section 2 and [NISTIR 8179] for a detailed description of criticality analysis.

>Cross-Framework Mappings

Ask AI

Configure your API key to use AI features.