NIST 800-53 rev.5/System and Services Acquisition/716 of 1011
SA-11 (07)Developer Testing and Evaluation | Verify Scope of Testing and Evaluation
Control family: System and Services Acquisition
Control description
Require the developer of the system, system component, or system service to verify that the scope of testing and evaluation provides complete coverage of the required controls at the following level of rigor: [Assignment: organization-defined breadth and depth of testing and evaluation].
How to implement
Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.