PI1.2

The entity implements policies and procedures over system inputs, including controls over completeness and accuracy, to result in products, services, and reporting to meet the entity’s objectives.

Points of Focus

Defines Characteristics of Processing Inputs

The characteristics of processing inputs that are necessary to meet requirements are defined.

Evaluates Processing Inputs

Processing inputs are evaluated for compliance with defined input requirements.

Creates and Maintains Records of System Inputs

Records of system input activities are created and maintained completely and accurately in a timely manner.

Evidence Requests

Area of Focus	Artifact	Description
Technology Design & Acquisition	Secure Software Development Principles (SSDP)	Documented evidence of a Secure Software Development Principles (SSDP). This is program-level documentation in the form of a runbook, playbook or a similar format provides guidance on organizational practices that support existing policies and standards.
Technology Design & Acquisition	Secure Engineering & Data Privacy (SEDP)	Documented evidence of a Secure Engineering & Data Privacy (SEDP) program. This is program-level documentation in the form of a runbook, playbook or a similar format provides guidance on organizational practices that support existing policies and standards.
Technology Design & Acquisition	Secure Engineering Principles (SEP)	Documented evidence of defined secure engineering principles used to ensure Sensitivity, Integrity, Availability & Safety (CIAS) concerns are properly addressed in the design and implementation of systems, applications and services.
Technology Design & Acquisition	System Design Documentation	Documented evidence of system design documentation.
Technology Design & Acquisition	Software Assurance Maturity Model (SAMM)	Documented evidence of a Software Assurance Maturity Model (SAMM).

Points of Focus​

Evidence Requests​

Points of Focus

Evidence Requests