Failure to ensure that the organization requires the developer of the information system, system component, or information system service to produce a design specification and security architecture that indicated below could lead to instability of the system or possibly to the compromise of the system: (i) Is consistent with and [Test: SA-17.1 - Developer Security [Test: SA-17.1 - supportive of the security Developer Security Architecture and [E-# OR Developer Security architecture established within Architecture and Design [NIST High W-#] Architecture and the enterprise architecture; Design] w/ DHS 4300A Design] SA-17] (ii) Accurately and completely Not Entered Not Entered describes the required security functionality, and the allocation of security controls among physical and logical components; and (iii) Expresses how individual security functions, mechanisms, and services work together to provide required security capabilities and a unified approach to protection. Handling Failure to meet the [E-# OR [Test: SI-11.1 - [NIST 800-53 w/ requirements for error handling High W-#] Handling] DHS 4300A SI-11] [Test: SI-11.1 - Error listed below could lead to the
[E-# OR W-#] Developer Security Architecture and Design [NIST w/ DHS 4300A SA-17] [Test: SA-17.1 - Developer Security Architecture and Design] Not Entered Failure to ensure that the organization requires the developer of the information system, system component, or information system service to produce a design specification and security architecture that indicated below could lead to instability of the system or possibly to the compromise of the system: (i) Is consistent with and supportive of the security architecture established within the enterprise architecture; (ii) Accurately and completely describes the required security functionality, and the allocation of security controls among physical and logical components; and (iii) Expresses how individual security functions, mechanisms, and services work together to provide required security capabilities and a unified approach to protection. High [Test: SA-17.1 - Developer Security Architecture and Design] Not Entered [E-# OR W-#] Handling [NIST 800-53 w/ DHS 4300A SI-11] [Test: SI-11.1 - Error Failure to meet the requirements for error handling listed below could lead to the High [Test: SI-11.1 - Handling]
Security%20Assessment%20Report%20Extensible.docx