CyberStrikeus/CyberStrike - Page 136

sa-5-5-source-code

Source Code

sa-5-system-documentation

Obtain or develop administrator documentation for the system, system component, or system service that describes: Secure configuration, installation,

sa-6-software-usage-restrictions

Software Usage Restrictions

sa-7-user-installed-software

User-installed Software

sa-8-1-clear-abstractions

Implement the security design principle of clear abstractions.

sa-8-10-hierarchical-trust

Implement the security design principle of hierarchical trust in [organization-defined].

sa-8-11-inverse-modification-threshold

Implement the security design principle of inverse modification threshold in [organization-defined].

sa-8-12-hierarchical-protection

Implement the security design principle of hierarchical protection in [organization-defined].

sa-8-13-minimized-security-elements

Implement the security design principle of minimized security elements in [organization-defined].

sa-8-14-least-privilege

Implement the security design principle of least privilege in [organization-defined].

sa-8-15-predicate-permission

Implement the security design principle of predicate permission in [organization-defined].

sa-8-16-self-reliant-trustworthiness

Implement the security design principle of self-reliant trustworthiness in [organization-defined].

sa-8-17-secure-distributed-composition

Implement the security design principle of secure distributed composition in [organization-defined].

sa-8-18-trusted-communications-channels

Implement the security design principle of trusted communications channels in [organization-defined].

sa-8-19-continuous-protection

Implement the security design principle of continuous protection in [organization-defined].

sa-8-2-least-common-mechanism

Implement the security design principle of least common mechanism in [organization-defined].

sa-8-20-secure-metadata-management

Implement the security design principle of secure metadata management in [organization-defined].

sa-8-21-self-analysis

Implement the security design principle of self-analysis in [organization-defined].

sa-8-22-accountability-and-traceability

Implement the security design principle of accountability and traceability in [organization-defined].

sa-8-23-secure-defaults

Implement the security design principle of secure defaults in [organization-defined].

sa-8-24-secure-failure-and-recovery

Implement the security design principle of secure failure and recovery in [organization-defined].

sa-8-25-economic-security

Implement the security design principle of economic security in [organization-defined].

sa-8-26-performance-security

Implement the security design principle of performance security in [organization-defined].

sa-8-27-human-factored-security

Implement the security design principle of human factored security in [organization-defined].

sa-8-28-acceptable-security

Implement the security design principle of acceptable security in [organization-defined].

sa-8-29-repeatable-and-documented-procedures

Implement the security design principle of repeatable and documented procedures in [organization-defined].

sa-8-3-modularity-and-layering

Implement the security design principles of modularity and layering in [organization-defined].

sa-8-30-procedural-rigor

Implement the security design principle of procedural rigor in [organization-defined].

sa-8-31-secure-system-modification

Implement the security design principle of secure system modification in [organization-defined].

sa-8-32-sufficient-documentation

Implement the security design principle of sufficient documentation in [organization-defined].

sa-8-33-minimization

Implement the privacy principle of minimization using [organization-defined].

sa-8-4-partially-ordered-dependencies

Implement the security design principle of partially ordered dependencies in [organization-defined].

sa-8-5-efficiently-mediated-access

Implement the security design principle of efficiently mediated access in [organization-defined].

sa-8-6-minimized-sharing

Implement the security design principle of minimized sharing in [organization-defined].

sa-8-7-reduced-complexity

Implement the security design principle of reduced complexity in [organization-defined].

sa-8-8-secure-evolvability

Implement the security design principle of secure evolvability in [organization-defined].

sa-8-9-trusted-components

Implement the security design principle of trusted components in [organization-defined].

sa-8-security-and-privacy-engineering-principles

Apply the following systems security and privacy engineering principles in the specification, design, development, implementation, and modification of

sa-9-1-risk-assessments-and-organizational-approvals

Conduct an organizational assessment of risk prior to the acquisition or outsourcing of information security services;

sa-9-2-identification-of-functions-ports-protocols-and-services

Require providers of the following external system services to identify the functions, ports, protocols, and other services required for the use of su