Navigate

SA-17 (1)

SA-17 (1): Formal Policy Model

The organization requires the developer of the information system, system component, or information system service to:

SA-17 (1)(a): Produce, as an integral part of the development process, a formal policy model describing the [Assignment: organization-defined elements of organizational security policy] to be enforced; and

SA-17 (1)(b): Prove that the formal policy model is internally consistent and sufficient to enforce the defined elements of the organizational security policy when implemented.

Supplemental

Formal models describe specific behaviors or security policies using formal languages, thus enabling the correctness of those behaviors/policies to be formally proven. Not all components of information systems can be modeled, and generally, formal specifications are scoped to specific behaviors or policies of interest (e.g., nondiscretionary access control policies). Organizations choose the particular formal modeling language and approach based on the nature of the behaviors/policies to be described and the available tools. Formal modeling tools include, for example, Gypsy and Zed.

CIA Levels
Confidentiality	unknown
Integrity	unknown
Availability	unknown

Overlays
None

Related Controls

The controls below (if any) were marked by NIST as being related to SA-17 (1).

Control	Description
No controls

Enhancements

The controls below (if any) add on to the requirements of SA-17 (1).

Control	Description
No controls

Related CCIs

The CCIs below are tied to SA-17 (1).

CCI	Definition
CCI-003298	The organization requires the developer of the information system, system component, or information system to produce, as an integral part of the development process, a formal policy model describing the organization-defined elements of organizational security policy to be enforced.
CCI-003299	The organization defines the elements of organization security policy to be described in the formal policy model for enforcement on the information system, system component, or information system service.
CCI-003300	The organization requires the developer of the information system, system component, or information system service to prove that the formal policy model is internally consistent and sufficient to enforce the defined elements of the organizational security policy when implemented.