Navigate

CCI-003302

CCI-003302 Definition

The organization requires the developer of the information system, system component, or information system service to define security-relevant hardware.

Status
Type	CheckType.policy

Master Assessment Datasheet

Implementation Guidance

Validation Procedures

Compelling Evidence

Related Controls

The controls below (if any) were marked by NIST as being related to CCI-003302.

Control	Description
SA-17(2)	The organization requires the developer of the information system, system component, or information system service to: (a): Define security-relevant hardware, software, and firmware; and (b): Provide a rationale that the definition for security-relevant hardware, software, and firmware is complete.