SA-4(1): Functional Properties of Controls

Control Family:

System and Services Acquisition

Parent Control:

SA-4: Acquisition Process

CSF v1.1 References:

ID.SC-3
PR.IP-2
DE.CM-6

Baselines:

Moderate
High

Previous Version:

NIST Special Publication 800-53 Revision 4:
SA-4(1): Functional Properties Of Security Controls

Control Statement

Require the developer of the system, system component, or system service to provide a description of the functional properties of the controls to be implemented.

Supplemental Guidance

Functional properties of security and privacy controls describe the functionality (i.e., security or privacy capability, functions, or mechanisms) visible at the interfaces of the controls and specifically exclude functionality and data structures internal to the operation of the controls.