SA-18(1): Multiple Phases Of Sdlc
Control Family:
Parent Control:
CSF v1.1 References:
Baselines:
(Not part of any baseline)
Control is withdrawn in the next version of this control set and incorporated into: SR-9(1): Multiple Stages of System Development Life Cycle.
Control Statement
The organization employs anti-tamper technologies and techniques during multiple phases in the system development life cycle including design, development, integration, operations, and maintenance.
Supplemental Guidance
Organizations use a combination of hardware and software techniques for tamper resistance and detection. Organizations employ obfuscation and self-checking, for example, to make reverse engineering and modifications more difficult, time-consuming, and expensive for adversaries. Customization of information systems and system components can make substitutions easier to detect and therefore limit damage.