|
controlSA-1
Policy and Procedures (SA-1)
Develop, document, and disseminate to [organization-defined]: Designate an [organization-defined] to manage the development, documentation, and dissemination of the system and services acquisition policy and procedures; and Review and update the current system and services acquisition:
Security Baselines
LOWMODERATEHIGH
acquisitionsdlcservicessupply-chain
Why These Connect
Baselined In3
This control is included in the linked security baseline (LOW, MODERATE, or HIGH).
Supports5
These related controls work together — a change to one may affect the others.