Acquisitions

class

Management

family

System and Services Acquisition

number

SA-4

priority

P1

impact

LOW_MODERATE_HIGH

The organization includes the following requirements and/or specifications, explicitly or by reference, in information system acquisition contracts based on an assessment of risk and in accordance with applicable federal laws, Executive Orders, directives, policies, regulations, and standards: Security functional requirements/specifications; Security-related documentation requirements; and Developmental and evaluation-related assurance requirements.

Comments