NIST 800-53 rev.5/System and Services Acquisition/728 of 1011
SA-15 (11)Development Process, Standards, and Tools | Archive System or Component
Control family: System and Services Acquisition
Control description
Require the developer of the system or system component to archive the system or component to be released or delivered together with the corresponding evidence supporting the final security and privacy review.
How to implement
Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.