CCI-003260

Threat modeling performed by the developer for the information system uses organization-defined information concerning impact, environment of operations, known or assumed threats, and acceptable risk levels.

Implementation Guidance

Validation Procedures

The controls below (if any) were marked by NIST as being related to CCI-003260.