NIST SP 800-53 SA-8 Security Engineering Principles

NIST 800-53 SA-8

Security Engineering Principles

Return to master list of NIST 800-53 controls.

Interview questions for NIST SP 800-53 SA-8 assessment.

Interview questions are useful mainly for CA-2 Security Assessments and CA-4 Security Certification. For most environments they are too laborious to include in CA-7 Continuous Monitoring.

Depending on FIPS 199 impact level and whether the Industrial Control Systems (ICS/SCADA) subset of 800-53 is chosen, LJK/Security™ starter templates provide Interview questions in the following groups:

Determination Statement Number

Group Names

NIST SP 800-53 R2 SA-8

APPSTAFF

AUDSTAFF

FACSTAFF

HDWSTAFF

NETSTAFF

SYSSTAFF

Manual Inspection items for NIST SP 800-53 SA-8 assessment.

Manual Inspection items are useful mainly for CA-2 Security Assessments and CA-4 Security Certification. For most environments they are too laborious to include in CA-7 Continuous Monitoring.

Depending on FIPS 199 impact level and whether the Industrial Control Systems (ICS/SCADA) subset of 800-53 is chosen, LJK/Security™ starter templates provide Manual Inspection items in the following groups:

Determination Statement Number

Group Names

NIST SP 800-53 R2 SA-8

POLICY

Descriptions above apply to LJK/Security™ Version 3.0.

The notation NIST SP 800-53 above refers in particular to NIST Special Publication 800-53 Revision 2.

Those NIST Special Publications specify security standards in support of FISMA for US Federal Government civil activities.

Return to master list of NIST 800-53 controls.