contract] or received a message) could lead to compromise of the system or of the data in the system. Failure of the organization to require the developer of the information system, system component, or information system service to perform tasks indicated below could leave the system more exposed to vulnerabilities: (i) Create and implement a security assessment plan that [Test: SA-11.1 - provides for security testing Developer Security [Test: SA-11.1 - Developer Security and evaluation: Testing and [E-# OR Developer Security Testing and Evaluation [NIST High W-#] Testing and Evaluation] at the depth of 800-53 w/ DHS Evaluation] functional 4300A SA-11] Not Entered properties, security Not Entered related externally visible interfaces, design, low-level design, or implementation representation (source code/hardware schematics; and at the rigor of showing, demonstrating, or
contract] or received a message) could lead to compromise of the system or of the data in the system. [E-# OR W-#] Developer Security Testing and Evaluation [NIST 800-53 w/ DHS 4300A SA-11] [Test: SA-11.1 - Developer Security Testing and Evaluation] Not Entered Failure of the organization to require the developer of the information system, system component, or information system service to perform tasks indicated below could leave the system more exposed to vulnerabilities: (i) Create and implement a security assessment plan that provides for security testing and evaluation: at the depth of functional properties, security related externally visible interfaces, design, low-level design, or implementation representation (source code/hardware schematics; and at the rigor of showing, demonstrating, or High [Test: SA-11.1 - Developer Security Testing and Evaluation] Not Entered
Security%20Assessment%20Report%20Extensible.docx