NIST SP 800-53 r4 Security Control SA-4 (7): NIAP-Approved Protection Profiles, v4
Profile of requirements corresponding to NIST Special Publication 800-53, r4, Security Control SA-4 (7): NIAP-Approved Protection Profiles.

Trust Expression:
TD_ref1
References (1)
TD Acquisition Process | Niap-Approved Protection Profiles, v1.0 | |
---|---|
Description | Defines conformance and assessment criteria for verifying that an organization: (a) Limits the use of commercially provided information assurance (IA) and IA-enabled information technology products to those products that have been successfully evaluated against a National Information Assurance partnership (NIAP)-approved Protection Profile for a specific technology type, if such a profile exists; and (b) Requires, if no NIAP-approved Protection Profile exists for a specific technology type but a commercially provided information technology product relies on cryptographic functionality to enforce its security policy, that the cryptographic module is FIPS-validated. . |
ID | TD_ref1 |
Provider Reference |
Sources (1)
SP800-53R4 | NIST Special Publication 800-53 Revision 4, Security and Privacy Controls for Federal Information Systems and Organizations, National Institute of Standards and Technology, April 2013 (Includes updates as of 01-15-2014). Available at http://dx.doi.org/10.6028/NIST.SP.800-53r4. |