SA-3 What is the solution and how is it implemented? Part a Part b Part c Part d (SA-4) The organization includes the following requirements, descriptions, and criteria, explicitly or by reference, in the acquisition contract for the information system, system component, or information system service in accordance with applicable federal laws, Executive Orders, directives, policies, regulations, standards, guidelines, and organizational mission/business needs: Security functional requirements; Security strength requirements; Security assurance requirements; Security-related documentation requirements; Requirements for protecting security-related documentation; Description of the information system development environment and environment in which the system is intended to operate; and Acceptance criteria. Additional FedRAMP Requirements and Guidance: Guidance: The use of Common Criteria (ISO/IEC 15408) evaluated products is strongly preferred. See or . SA-4 Control Summary Information Responsible Role: Implementation Status (check all that apply):
SA-3 What is the solution and how is it implemented? Part a Part b Part c Part d (SA-4) The organization includes the following requirements, descriptions, and criteria, explicitly or by reference, in the acquisition contract for the information system, system component, or information system service in accordance with applicable federal laws, Executive Orders, directives, policies, regulations, standards, guidelines, and organizational mission/business needs: Security functional requirements; Security strength requirements; Security assurance requirements; Security-related documentation requirements; Requirements for protecting security-related documentation; Description of the information system development environment and environment in which the system is intended to operate; and Acceptance criteria. Additional FedRAMP Requirements and Guidance: Guidance: The use of Common Criteria (ISO/IEC 15408) evaluated products is strongly preferred. See or . SA-4 Control Summary Information Responsible Role: Implementation Status (check all that apply):
FedRAMP-System-Security-Plan-Template-v2.1.docx