>myctrl.tools
Preferences
Under active development — Content is continuously updated and improved
Compare

SA-15—Development Process, Standards, and Tools

>Control Description

a

Require the developer of the system, system component, or system service to follow a documented development process that:

1.

Explicitly addresses security and privacy requirements;

2.

Identifies the standards and tools used in the development process;

3.

Documents the specific tool options and tool configurations used in the development process; and

4.

Documents, manages, and ensures the integrity of changes to the process and/or tools used in development; and

b

Review the development process, standards, tools, tool options, and tool configurations ⚙organization-defined frequency to determine if the process, standards, tools, tool options and tool configurations selected and employed can satisfy the following security and privacy requirements: ⚙organization-defined security and privacy requirements.

>Related Controls

MA-6
SA-3
SA-4
SA-8
SA-10
SA-11
SR-3
SR-4
SR-5
SR-6
SR-9

Ask AI

Configure your API key to use AI features.