SA-21_developer-screening
Require that the developer of [organization-defined]: Has appropriate access authorizations as determined by assigned [organization-defined] ; and Sat
Browse reusable Agent Skills, each with a clear purpose and practical guidance.
Require that the developer of [organization-defined]: Has appropriate access authorizations as determined by assigned [organization-defined] ; and Sat
Replace system components when support for the components is no longer available from the developer, vendor, or manufacturer;
Employ [organization-defined] on [organization-defined] supporting mission essential services or functions to increase the trustworthiness in those sy
Design organizational systems, system components, or system services to achieve cyber resiliency by: Defining the following cyber resiliency goals: [o
Protect system preproduction environments commensurate with risk throughout the system development life cycle for the system, system component, or sys
Approve, document, and control the use of live data in preproduction environments for the system, system component, or system service;
Plan for and implement a technology refresh schedule for the system throughout the system development life cycle.
Acquire, develop, and manage the system using [organization-defined] that incorporates information security and privacy considerations;
Include organizational data ownership requirements in the acquisition contract;
Require the developer of the system, system component, or system service to provide design and implementation information for the controls that includ