NIST SP 800-53 Revision 5.1 HIGH

SA System Services Acquisition

NIST SP 800-53 Revision 5.1 HIGH SA-11: Developer Testing and Evaluation

Require developer to test at FedRAMP-defined depth and coverage; document; correct flaws.

Other controls in SA System Services Acquisition

SA-1 Policy and Procedures
SA-10 Developer Configuration Management
SA-15 Development Process, Standards, and Tools. a. Require the developer of the system, system component, or system service to follow a documented development process that: 1. Explicitly addresses security and privacy requirements; 2. Identifies the
SA-16 Developer-Provided Training
SA-17 Developer Security and Privacy Architecture and Design
SA-2 Allocation of Resources
SA-22 Unsupported System Components. a. Replace system components when support for the components is no longer available from the developer, vendor, or manufacturer; or b. Provide the following options for alternative sources for continued support
SA-3 System Development Life Cycle

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All NIST SP 800-53 Revision 5.1 HIGH controls