NIST SP 800-204D Software Supply Chain Security in DevSecOps CI/CD Pipelines
Section 3: Software supply chain risk factors and mitigation measures – NIST SP 800-204D Software Supply Chain Security in DevSecOps CI/CD Pipelines

NIST SP 800-204D Software Supply Chain Security in DevSecOps CI/CD Pipelines 3.2.1a: Keep every developer and build system to a defined security baseline

What does 3.2.1a require?

Government and enterprise environments set and follow a written security policy that meets their regulatory obligations and industry practice (SP 800-53 is the reference), and every developer system meets a predefined minimum baseline: operating system and applications patched to current security levels, endpoint protection in place, and individual accountability for the system. The organisation reassesses its posture regularly, finds weaknesses and fixes them, and keeps the SDLC environment aligned with the application security standards it has adopted.

Maintained by Gerard Blokdyk

Other controls in Section 3: Software supply chain risk factors and mitigation measures – NIST SP 800-204D Software Supply Chain Security in DevSecOps CI/CD Pipelines

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll NIST SP 800-204D Software Supply Chain Security in DevSecOps CI/CD Pipelines controls