|
controlSA-21
Developer Screening (SA-21)
Require that the developer of [organization-defined]:
Security Baselines
HIGHLOWMODERATE
acquisitionsdlcservicessupply-chain
Why These Connect
Maps To1
These are equivalent or closely aligned requirements in other frameworks.
Baselined In1
This control is included in the linked security baseline (LOW, MODERATE, or HIGH).
Supports11
These related controls work together — a change to one may affect the others.
Enhances1
These enhancements add specific capabilities or refinements to the base control.
Related Controls(6)
Cross-Framework Mappings(1)
ISO 27001ISO/IEC 27001:20221 mappingFinal
NIST OLIR informative reference — SP 800-53 Rev 5 to ISO/IEC 27001:2022
Organization-Defined Parameters(3)
Assignmentorganization-defined system, systems component, or system service
Assignmentorganization-defined official government duties
Assignmentorganization-defined additional personnel screening criteria