CCI-004689

Include the controls needed to satisfy security requirements, explicitly or by reference, using standardized contract language; and/or organization-defined contract language in the acquisition contract for the information system, system component, or information system service.

Implementation Guidance

Validation Procedures

The controls below (if any) were marked by NIST as being related to CCI-004689.