obtains and examines the Therefore, this contracts/agreements to AP is not ensure the organization applicable. being inspected/assessed requires that the developer of the information system, system component, or information system service show via informal demonstration, that the descriptive top-level specification completely covers the interfaces to security-relevant hardware. SA-17 SA-17 (4) (c) CCI-003326 blank blank blank The organization conducting NIST has not (4) the inspection/assessment allocated this AP. obtains and examines the Therefore, this contracts/agreements to AP is not ensure the organization applicable. being inspected/assessed requires that the developer of the information system, system component, or information system service show via informal demonstration, that the descriptive top-level specification completely covers the interfaces to security-relevant software. SA-17 SA-17 (4) (c) CCI-003327 blank blank The organization conducting NIST has not (4) the inspection/assessment allocated this AP. obtains and examines the Therefore, this contracts/agreements to AP is not ensure the organization applicable. being inspected/assessed requires that the developer of the information system, system component, or information system service show via informal demonstration, that the descriptive top-level specification completely covers the interfaces to security-relevant firmware. SA-17 SA-17 (4) (d) CCI-003328 blank blank blank The organization conducting NIST has not (4) the inspection/assessment allocated this AP. obtains and examines the Therefore, this contracts/agreements to AP is not ensure the organization applicable. being inspected/assessed requires that the developer of the information system, system component, or information system service show that the descriptive top-level specification is an accurate description of the interfaces to hardware. SA-17 SA-17 (4) (d) CCI-003329 blank blank blank The organization conducting NIST has not (4) the inspection/assessment allocated this AP.
obtains and examines the contracts/agreements to ensure the organization being inspected/assessed requires that the developer of the information system, system component, or information system service show via informal demonstration, that the descriptive top-level specification completely covers the interfaces to security-relevant hardware. Therefore, this AP is not applicable. SA-17 (4) SA-17 (4) (c) CCI-003326 blank blank blank The organization conducting the inspection/assessment obtains and examines the contracts/agreements to ensure the organization being inspected/assessed requires that the developer of the information system, system component, or information system service show via informal demonstration, that the descriptive top-level specification completely covers the interfaces to security-relevant software. NIST has not allocated this AP. Therefore, this AP is not applicable. SA-17 (4) SA-17 (4) (c) CCI-003327 blank blank The organization conducting the inspection/assessment obtains and examines the contracts/agreements to ensure the organization being inspected/assessed requires that the developer of the information system, system component, or information system service show via informal demonstration, that the descriptive top-level specification completely covers the interfaces to security-relevant firmware. NIST has not allocated this AP. Therefore, this AP is not applicable. SA-17 (4) SA-17 (4) (d) CCI-003328 blank blank blank The organization conducting the inspection/assessment obtains and examines the contracts/agreements to ensure the organization being inspected/assessed requires that the developer of the information system, system component, or information system service show that the descriptive top-level specification is an accurate description of the interfaces to hardware. NIST has not allocated this AP. Therefore, this AP is not applicable. SA-17 (4) SA-17 (4) (d) CCI-003329 blank blank blank The organization conducting the inspection/assessment NIST has not allocated this AP.
RMF_System-and-Services-Acquisition-Plan.docx