PI1.3

The entity implements policies and procedures over system processing to result in products, services, and reporting to meet the entity’s objectives.

Points of Focus

Defines Processing Specifications

The processing specifications that are necessary to meet product or service requirements are defined.

Defines Processing Activities

Processing activities are defined to result in products or services that meet specifications.

Detects and Corrects Processing or Production Activity Errors

Errors encountered in processing or production activities are detected and corrected in a timely manner.

Records System Processing Activities

System processing activities are recorded completely and accurately in a timely manner.

Processes Inputs

Inputs are processed completely, accurately, and timely as authorized in accordance with defined processing activities.

Area of Focus	Artifact	Description
Technology Design & Acquisition	Secure Software Development Principles (SSDP)	Documented evidence of a Secure Software Development Principles (SSDP). This is program-level documentation in the form of a runbook, playbook or a similar format provides guidance on organizational practices that support existing policies and standards.
Technology Design & Acquisition	Secure Engineering & Data Privacy (SEDP)	Documented evidence of a Secure Engineering & Data Privacy (SEDP) program. This is program-level documentation in the form of a runbook, playbook or a similar format provides guidance on organizational practices that support existing policies and standards.
Technology Design & Acquisition	Secure Engineering Principles (SEP)	Documented evidence of defined secure engineering principles used to ensure Sensitivity, Integrity, Availability & Safety (CIAS) concerns are properly addressed in the design and implementation of systems, applications and services.
Technology Design & Acquisition	System Design Documentation	Documented evidence of system design documentation.
Technology Design & Acquisition	Software Assurance Maturity Model (SAMM)	Documented evidence of a Software Assurance Maturity Model (SAMM).