SA-17(02) Security-relevant Components
Require the developer of the system, system component, or system service to:
(a) Define security-relevant hardware, software, and firmware; and
(b) Provide a rationale that the definition for security-relevant hardware, software, and firmware is complete.
Baselines
- L
- M
- H
- P
Guidance
The security-relevant hardware, software, and firmware represent the portion of the system, component, or service that is trusted to perform correctly to maintain required security properties.
Related controls 2
- AC-25 Reference Monitor L M H P
- SA-05 System Documentation L M H P