System and Services Acquisition (SA)
10 controls
- SA-1 System and Services Acquisition Policy and Procedures
- SA-2 Allocation of Resources
- SA-3 System Development Life Cycle
- SA-4 Acquisition Process
- SA-5 Information System Documentation
- SA-8 Security Engineering Principles
- SA-9 External Information System Services
- SA-10 Developer Configuration Management
- SA-11 Developer Security Testing and Evaluation
- SA-22 Unsupported System Components
Revision History
Last Updated: February 21, 2025
Previous Versions:
- June 29, 2023
- May 31, 2022
- March 25, 2021
- September 16, 2019