NIST SP 800-53 Rev. 5
SA-17
System and Services Acquisition

Developer Security and Privacy Architecture and Design

Description

Require the developer of the system, system component, or system service to produce a design specification and security and privacy architecture that: a. Is consistent with the organization’s security and privacy architecture that is an integral part the organization’s enterprise architecture; b. Accurately and completely describes the required security and privacy functionality, and the allocation of controls among physical and logical components; and c. Expresses how individual security and privacy functions, mechanisms, and services work together to provide required security and privacy capabilities and a unified approach to protection.

Mapped SPARTA techniques

80 techniques

Cite as SafeMode Space, nist-80053-rev5 SA-17.

Built 2026-07-25 from 216 techniques, 334 regulation articles, 125 ENISA controls, 2,610 framework controls, and 90 countermeasures.