CCI-003263

The organization defines information concerning impact, environment of operations, known or assumed threats, and acceptable risk levels to be used to perform a vulnerability analysis for the information system by the developer.

Implementation Guidance

Validation Procedures

The controls below (if any) were marked by NIST as being related to CCI-003263.