NIST SP 800-53 Rev. 5
SA-4(12)
System and Services Acquisition
enhancement

Data Ownership

Parent: SA-4

Description

a. Include organizational data ownership requirements in the acquisition contract; and b. Require all data to be removed from the contractor’s system and returned to the organization within [organization-defined parameter].

Mapped SPARTA techniques

73 techniques

Cite as SafeMode Space, nist-80053-rev5 SA-4(12).

Built 2026-07-25 from 216 techniques, 334 regulation articles, 125 ENISA controls, 2,610 framework controls, and 90 countermeasures.