|
controlSA-5
System Documentation (SA-5)
Obtain or develop administrator documentation for the system, system component, or system service that describes: Obtain or develop user documentation for the system, system component, or system service that describes: Document attempts to obtain system, system component, or system service documentation when such documentation is either unavailable or nonexistent and take [organization-defined] in response; and Distribute documentation to [organization-defined].
Security Baselines
LOWMODERATEHIGH
acquisitionsdlcservicessupply-chain
Why These Connect
Baselined In3
This control is included in the linked security baseline (LOW, MODERATE, or HIGH).
Supports35
These related controls work together — a change to one may affect the others.
Enhances5
These enhancements add specific capabilities or refinements to the base control.
Related Controls(22)
CM-4Impact Analyses (CM-4)
LMH
CM-6Configuration Settings (CM-6)LMH
CM-7Least Functionality (CM-7)LMH
CM-8System Component Inventory (CM-8)LMH
PL-2System Security and Privacy Plans (PL-2)LMH
PL-4Rules of Behavior (PL-4)LMH
PL-8Security and Privacy Architectures (PL-8)MH
PS-2Position Risk Designation (PS-2)LMH
PS-7External Personnel Security (PS-7)LMH
SA-3System Development Life Cycle (SA-3)LMH
SA-4Acquisition Process (SA-4)LMH
SA-8Security and Privacy Engineering Principles (SA-8)LMH
SA-9External System Services (SA-9)LMH
SA-10Developer Configuration Management (SA-10)MH
SA-11Developer Testing and Evaluation (SA-11)MH
SA-15Development Process, Standards, and Tools (SA-15)MH
SA-16Developer-provided Training (SA-16)H
SA-17Developer Security and Privacy Architecture and Design (SA-17)H
SI-12Information Management and Retention (SI-12)LMH
SR-3Supply Chain Controls and Processes (SR-3)LMH
SC-3Security Function Isolation (SC-3)H
SR-5Acquisition Strategies, Tools, and Methods (SR-5)LMH