← Back to catalog
SA-3(1)
Manage Preproduction Environment
System and Services Acquisition (SA)
Baselines
Low · Not includedModerate · Not includedHigh · Not included
Description
Protect system preproduction environments commensurate with risk throughout the system development life cycle for the system, system component, or system service.
Discussion
The preproduction environment includes development, test, and integration environments. The program protection planning processes established by the Department of Defense are examples of managing the preproduction environment for defense contractors. Criticality analysis and the application of controls on developers also contribute to a more secure system development environment.
Implementation guidance
No content available.
CSF 2.0 crosswalk
No CSF mappings exist for this control.