SA-03.3 ยท Technology Refresh

Control Description

Plan for and implement a technology refresh schedule for the system throughout the system development life cycle.

Impact Baselines
Security baselines where this control applies
Not in any baseline
Control Properties
SP800-53-enhancement
organization
Assurance
Enhancement
Control Statement
The control requirements

Plan for and implement a technology refresh schedule for the system throughout the system development life cycle.

Supplemental Guidance

Technology refresh planning may encompass hardware, software, firmware, processes, personnel skill sets, suppliers, service providers, and facilities. The use of obsolete or nearing obsolete technology may increase the security and privacy risks associated with unsupported components, counterfeit or repurposed components, components unable to implement security or privacy requirements, slow or inoperable components, components from untrusted sources, inadvertent personnel error, or increased complexity. Technology refreshes typically occur during the operations and maintenance stage of the system development life cycle.

Related NIST Controls
Other NIST 800-53 controls related to this one