SA-12-727 Developer Security Testing and Evaluation

Developer Security Testing and Evaluation

Control ID

SA-12-727

Control Name

Developer Security Testing and Evaluation

Control Category

Security Assessment and Authorization

Functional Areas

Sub-Areas

NIST Baseline Level(s)

HIGH

NIST Priority

State Implementation Required

Agency Last Implemented Date

Risk Statement

Control Description

The organization protects against supply chain threats to the information system, system component, or information system service by employing [Assignment: organization-defined security safeguards] as part of a comprehensive, defense-in-breadth information security strategy.

Control Example

State Implementation

No statewide control

Testing Procedures