NIST SP 800-53 Rev. 5
SA-17(5)
System and Services Acquisition
enhancement

Conceptually Simple Design

Parent: SA-17

Description

Require the developer of the system, system component, or system service to: a. Design and structure the security-relevant hardware, software, and firmware to use a complete, conceptually simple protection mechanism with precisely defined semantics; and b. Internally structure the security-relevant hardware, software, and firmware with specific regard for this mechanism.

Mapped SPARTA techniques

No techniques mapped to this control.

Cite as SafeMode Space, nist-80053-rev5 SA-17(5).

Built 2026-07-25 from 216 techniques, 334 regulation articles, 125 ENISA controls, 2,610 framework controls, and 90 countermeasures.