Navigate

SA-15 (11)

SA-15 (11): Archive Information System / Component

The organization requires the developer of the information system or system component to archive the system or component to be released or delivered together with the corresponding evidence supporting the final security review.

Supplemental

Archiving relevant documentation from the development process can provide a readily available baseline of information that can be helpful during information system/component upgrades or modifications.

CIA Levels
Confidentiality	unknown
Integrity	unknown
Availability	unknown

Overlays
Cross Domain (Access), Cross Domain (Multilevel), Cross Domain (Transfer)

Related Controls

The controls below (if any) were marked by NIST as being related to SA-15 (11).

Control	Description
No controls

Enhancements

The controls below (if any) add on to the requirements of SA-15 (11).

Control	Description
No controls

Related CCIs

The CCIs below are tied to SA-15 (11).

CCI	Definition
CCI-003290	The organization requires the developer of the information system or system component to archive the system or component to be released or delivered together with the corresponding evidence supporting the final security review.