SA-4(1): Functional Properties Of Security Controls

Control Family:

System And Services Acquisition

Parent Control:

SA-4: Acquisition Process

Priority:

P1: Implement P1 security controls first.

CSF v1.1 References:

PR.IP-2
DE.CM-6

Baselines:

Moderate
High

Next Version:

NIST Special Publication 800-53 Revision 5.2.0:
SA-4(1): Functional Properties of Controls

Control Statement

The organization requires the developer of the information system, system component, or information system service to provide a description of the functional properties of the security controls to be employed.

Supplemental Guidance

Functional properties of security controls describe the functionality (i.e., security capability, functions, or mechanisms) visible at the interfaces of the controls and specifically exclude functionality and data structures internal to the operation of the controls.