SA-21
System and Services Acquisition
Developer Screening
Description
Require that the developer of [organization-defined parameter]: a. Has appropriate access authorizations as determined by assigned [organization-defined parameter] ; and b. Satisfies the following additional personnel screening criteria: [organization-defined parameter].
Mapped SPARTA techniques
No techniques mapped to this control.
Cite as SafeMode Space, nist-80053-rev5 SA-21.