SA-15: Development Process, Standards, and Tools

An OSCAL Control

- organization-defined security and privacy requirements
- security requirements
  security requirements to be satisfied by the process, standards, tools, tool options, and tool configurations are defined;
- privacy requirements
  privacy requirements to be satisfied by the process, standards, tools, tool options, and tool configurations are defined;
- frequency
  frequency at which to review the development process, standards, tools, tool options, and tool configurations is defined;