SA-15 Development Process, Standards, and Tools

Control statement

a. Require the developer of the system, system component, or system service to follow a documented development process that:
        1. Explicitly addresses security and privacy requirements;
        2. Identifies the standards and tools used in the development process;
        3. Documents the specific tool options and tool configurations used in the development process; and
        4. Documents, manages, and ensures the integrity of changes to the process and/or tools used in development; and
    b. Review the development process, standards, tools, tool options, and tool configurations {{ insert: param, sa-15_odp.01 }} to determine if the process, standards, tools, tool options and tool configurations selected and employed can satisfy the following security and privacy requirements: {{ insert: param, sa-15_prm_2 }}.

Parameter placeholders {{ insert: param, … }} reference FedRAMP-set values in the resolved profile. Full parameter map is preserved in the catalog database.

No 20x Key Security Indicators map to this control in the current catalog version.