FBI CJIS Security Policy SA-8: Security and Privacy Engineering Principles

What does SA-8 require?

Apply agency-documented systems security and privacy engineering principles in the specification, design, development, implementation and modification of the system and its components.

Maintained by Gerard BlokdykControl text last updated 21 May 2026

Other controls in SA: System and Services Acquisition – FBI CJIS Security Policy

SA-1 SA-1 Policy and Procedures
SA-10 SA-10 Developer Configuration Management
SA-11 SA-11 Developer Testing and Evaluation
SA-15 SA-15 Development Process, Standards, and Tools
SA-15(3) SA-15(3) Development Process, Standards, and Tools | Criticality Analysis
SA-2 SA-2 Allocation of Resources
SA-22 SA-22 Unsupported System Components
SA-3 SA-3 System Development Life Cycle

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All FBI CJIS Security Policy controls