This NIST 800-53 report is posted on the Internet to promote Version 3.0 of LJK/Security . The corresponding vulnerability report for your own system should be guarded more carefully, such as by being reviewed only from local HTML disk files rather than via a web server.

Return to Main Page
Manual Examination SA_04_1_I_10R

FIPS 199 High Impact (for ICS)
Findings Color Code
Satisfied
Other Than Satisfied - not assessed
Other Than Satisfied - failed

NIST SP 800-53A SA-04 .01(i)

Question: Does an examination of 3 months (starting 4 months ago) of acquisition contracts for information systems show the organization includes by reference security requirements and/or security specifications based on an assessment of risk and in accordance with applicable laws, Executive Orders, directives, policies, regulations, and standards that describe required design and development processes ?

Answered by: BOSTON::JOHNSON

As part of Manual Examination group: POLICY_SA

Answer: Not Asked

This NIST 800-53 report is posted on the Internet to promote Version 3.0 of LJK/Security . The corresponding vulnerability report for your own system should be guarded more carefully, such as by being reviewed only from local HTML disk files rather than via a web server.