|
controlSA-24

Design For Cyber Resiliency (SA-24)

Design organizational systems, system components, or system services to achieve cyber resiliency by: Implement the selected cyber resiliency goals, objectives, techniques, implementation approaches, and design principles as part of an organizational risk management process or systems security engineering process.

acquisitionsdlcservicessupply-chain

Why These Connect

Supports65

These related controls work together — a change to one may affect the others.

Related Controls(65)

CA-7Continuous Monitoring (CA-7)
LMH
CP-2Contingency Plan (CP-2)
LMH
CP-4Contingency Plan Testing (CP-4)
LMH
CP-9System Backup (CP-9)
LMH
CP-10System Recovery and Reconstitution (CP-10)
LMH
CP-11Alternate Communications Protocols (CP-11)CP-12Safe Mode (CP-12)CP-13Alternative Security Mechanisms (CP-13)IA-10Adaptive Authentication (IA-10)IR-4Incident Handling (IR-4)
LMH
IR-5Incident Monitoring (IR-5)
LMH
PE-11Emergency Power (PE-11)
MH
PE-17Alternate Work Site (PE-17)
MH
PL-8Security and Privacy Architectures (PL-8)
MH
PM-7Enterprise Architecture (PM-7)PM-16Threat Awareness Program (PM-16)PM-30Supply Chain Risk Management Strategy (PM-30)PM-31Continuous Monitoring Strategy (PM-31)RA-3Risk Assessment (RA-3)
LMH
RA-5Vulnerability Monitoring and Scanning (RA-5)
LMH
RA-9Criticality Analysis (RA-9)
MH
RA-10Threat Hunting (RA-10)SA-3System Development Life Cycle (SA-3)
LMH
SA-8Security and Privacy Engineering Principles (SA-8)
LMH
SA-9External System Services (SA-9)
LMH
SA-17Developer Security and Privacy Architecture and Design (SA-17)
H
SC-3Security Function Isolation (SC-3)
H
SC-5Denial-of-service Protection (SC-5)
LMH
SC-7Boundary Protection (SC-7)
LMH
SC-10Network Disconnect (SC-10)
MH
SC-11Trusted Path (SC-11)SC-29Heterogeneity (SC-29)SC-30Concealment and Misdirection (SC-30)SC-34Non-modifiable Executable Programs (SC-34)SC-35External Malicious Code Identification (SC-35)SC-36Distributed Processing and Storage (SC-36)SC-37Out-of-band Channels (SC-37)SC-39Process Isolation (SC-39)
LMH
SC-44Detonation Chambers (SC-44)SC-47Alternate Communications Paths (SC-47)SC-48Sensor Relocation (SC-48)SC-49Hardware-enforced Separation and Policy Enforcement (SC-49)SC-50Software-enforced Separation and Policy Enforcement (SC-50)SC-51Hardware-based Protection (SC-51)SI-3Malicious Code Protection (SI-3)
LMH
SI-4System Monitoring (SI-4)
LMH
SI-6Security and Privacy Function Verification (SI-6)
H
SI-7Software, Firmware, and Information Integrity (SI-7)
MH
SI-10Information Input Validation (SI-10)
MH
SI-14Non-persistence (SI-14)SI-15Information Output Filtering (SI-15)SI-16Memory Protection (SI-16)
MH
SI-19De-identification (SI-19)SI-20Tainting (SI-20)SI-21Information Refresh (SI-21)SI-22Information Diversity (SI-22)SI-23Information Fragmentation (SI-23)SR-3Supply Chain Controls and Processes (SR-3)
LMH
SR-4Provenance (SR-4)SR-5Acquisition Strategies, Tools, and Methods (SR-5)
LMH
SR-6Supplier Assessments and Reviews (SR-6)
MH
SR-7Supply Chain Operations Security (SR-7)SR-9Tamper Resistance and Detection (SR-9)
H
SR-10Inspection of Systems or Components (SR-10)
LMH
SR-11Component Authenticity (SR-11)
LMH