[Withdrawn: Incorporated into CM-8(9).]
[Withdrawn: Incorporated into CM-8(9).]
[Withdrawn: Incorporated into SA-4(1).]
[Withdrawn: Incorporated into SA-4(2).]
[Withdrawn: Incorporated into SA-4(2).]
[Withdrawn: Incorporated into SA-4(2).]
[Withdrawn: Incorporated into SA-4(2).]
Reimplement or custom develop the following critical system components: [Assignment: organization-defined critical system components].
Require that the developer of [Assignment: organization-defined system, system component, or system service]: a. Has appropriate access authorizations as determined by assigned [Assignment: organization-defined official government duties]; and b. Satisfies the following additional personnel screening criteria: [Assignment: organization-defined additional personnel screening criteria].
[Withdrawn: Incorporated into CM-10 and SI-7.]
a. Replace system components when support for the components is no longer available from the developer, vendor, or manufacturer; or b. Provide the following options for alternative sources for continued support for unsupported components [Selection (one or more): in-house support; [Assignment: organization-defined support from external providers]].