← SA-11 — Developer Testing and Evaluation

CCI-003178

Definition

Requires the developer of the system, system component, or system service, at all post-design phases of the system development life cycle, to correct flaws identified during testing/evaluation.

Parent Control

SA-11Developer Testing and EvaluationSystem and Services Acquisition

Linked STIG Checks (2)

V-222567CAT IIThe application must not be vulnerable to race conditions.Application Security and Development Security Technical Implementation Guide V-222652CAT IISecurity flaws must be fixed or addressed in the project plan.Application Security and Development Security Technical Implementation Guide