Eleos | Home

System and Services Acquisition (SA)

Acquisition Process | Data Ownership

Level N/A

(a) Include organizational data ownership requirements in the acquisition contract; and (b) Require all data to be removed from the contractor’s system and returned to the organization within [Assignment: organization-defined time frame].

Parent

Compliance Framework

NIST 800-53 Rev 5

Control Number

SA-4(12)

Related

Compliance Framework

CCM v4.0.10

Secure Controls Framework 2023.4

Control Number

IPY-04

AST-03

DCH-01.1

PRI-09

Solutions
Community

System and Services Acquisition (SA)

Acquisition Process | Data Ownership

Create new POAM

Create new Exception

Assign to POAM

Assign to Exception

Organization Passcode

Only share this code with people you trust. Users will become a member of your organization and view your SSP and reports.