← SA-4 (5) — System, Component, and Service Configurations

CCI-003109

Definition

Require the developer of the system, system component, or system service to deliver the system, component, or service with organization-defined security configurations implemented.

Parent Control

SA-4 (5)System, Component, and Service ConfigurationsSystem and Services Acquisition

Linked STIG Checks (2)

V-222661CAT IIUnnecessary built-in application accounts must be disabled.Application Security and Development Security Technical Implementation Guide V-222662CAT IDefault passwords must be changed.Application Security and Development Security Technical Implementation Guide