safemode.space
← NIST SP 800-53 Rev. 5
SA-3
System and Services Acquisition

System Development Life Cycle

Description

a. Acquire, develop, and manage the system using [organization-defined parameter] that incorporates information security and privacy considerations; b. Define and document information security and privacy roles and responsibilities throughout the system development life cycle; c. Identify individuals having information security and privacy roles and responsibilities; and d. Integrate the organizational information security and privacy risk management process into system development life cycle activities.

Mapped SPARTA techniques

195 techniques

Cross-framework references

Relationships published by the source frameworks themselves, reproduced here with attribution. They are not SafeMode Space mappings and carry no confidence rating of ours.

Referenced by 2 in NIST Cybersecurity Framework 2.0

Cite as SafeMode Space, nist-80053-rev5 SA-3.

Built 2026-07-25 from 216 techniques, 334 regulation articles, 125 ENISA controls, 2,610 framework controls, and 90 countermeasures.