|
control enhancementSA-11(1)
Static Code Analysis (SA-11(1))
Require the developer of the system, system component, or system service to employ static code analysis tools to identify common flaws and document the results of the analysis.
acquisitionsdlcservicessupply-chainenhancement
Why These Connect
Maps To1
These are equivalent or closely aligned requirements in other frameworks.
Enhances1
These enhancements add specific capabilities or refinements to the base control.
Cross-Framework Mappings(1)
ISO 27001ISO/IEC 27001:20221 mappingFinal
NIST OLIR informative reference — SP 800-53 Rev 5 to ISO/IEC 27001:2022