NIST SP 800-161 Rev 1
C-SCRM Family: System and Services Acquisition

NIST SP 800-161 Rev 1 161R1-SA-8: Security and Privacy Engineering Principles

Applies engineering principles to acquired and integrated components, not only to what is built in house.

Other controls in C-SCRM Family: System and Services Acquisition

You are reading one control. How much of NIST SP 800-161 Rev 1 have you already done?

NIST SP 800-161 Rev 1 161R1-SA-8 is one control. If you already hold one of the frameworks below, a reviewed crosswalk already says how much of NIST SP 800-161 Rev 1 your existing evidence covers. Hold C5 (Germany) and 94 of 191 NIST SP 800-161 Rev 1 controls already carry evidence.

If you hold C5 (Germany)49.2% covered · 97 gapsIf you hold NIST SP 800-171 Rev 338.2% covered · 118 gapsIf you hold Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.137.2% covered · 120 gapsIf you hold NIST SP 800-17221.5% covered · 150 gapsIf you hold AWS Well-Architected Security Pillar20.9% covered · 151 gapsIf you hold DORA17.3% covered · 158 gaps

Each report names every control your existing framework evidences, every one it does not, the reasoning behind each claim, and the claims that were argued against and rejected. 0 were rejected on the C5 (Germany) pair alone.

See the released pairs, $299 eachBrowse the graph free

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll NIST SP 800-161 Rev 1 controls