SA-4(1): Functional Properties Of Security Controls

CSF v1.1 References:

Baselines:

  • Moderate
  • High

Next Version:

Control Statement

The organization requires the developer of the information system, system component, or information system service to provide a description of the functional properties of the security controls to be employed.

Supplemental Guidance

Functional properties of security controls describe the functionality (i.e., security capability, functions, or mechanisms) visible at the interfaces of the controls and specifically exclude functionality and data structures internal to the operation of the controls.