CCI-004813

Require the developer of the system, system component, or system service to perform penetration testing under organization-defined constraints.

Implementation Guidance

Validation Procedures

The controls below (if any) were marked by NIST as being related to CCI-004813.