|
control enhancementSA-15(5)
Attack Surface Reduction (SA-15(5))
Require the developer of the system, system component, or system service to reduce attack surfaces to [organization-defined].
acquisitionsdlcservicessupply-chainenhancement
Why These Connect
Maps To1
These are equivalent or closely aligned requirements in other frameworks.
Enhances1
These enhancements add specific capabilities or refinements to the base control.
Cross-Framework Mappings(1)
ISO 27001ISO/IEC 27001:20221 mappingFinal
NIST OLIR informative reference — SP 800-53 Rev 5 to ISO/IEC 27001:2022