NIST SP 800-53 Rev. 5
SA-4(7)
System and Services Acquisition
enhancement

NIAP-approved Protection Profiles

Parent: SA-4

Description

a. Limit the use of commercially provided information assurance and information assurance-enabled information technology products to those products that have been successfully evaluated against a National Information Assurance partnership (NIAP)-approved Protection Profile for a specific technology type, if such a profile exists; and b. Require, if no NIAP-approved Protection Profile exists for a specific technology type but a commercially provided information technology product relies on cryptographic functionality to enforce its security policy, that the cryptographic module is FIPS-validated or NSA-approved.

Mapped SPARTA techniques

67 techniques

Cite as SafeMode Space, nist-80053-rev5 SA-4(7).

Built 2026-07-25 from 216 techniques, 334 regulation articles, 125 ENISA controls, 2,610 framework controls, and 90 countermeasures.