This requirement is withdrawn in Revision 3.
The record is preserved so users can trace where its intent was incorporated or addressed. It should not be presented as an active standalone Rev. 3 requirement.
Security requirement
No standalone statement is present in the official Rev. 3 OSCAL record.
Authoritative sources
- NIST SP 800-172 Revision 3 official publication ↗
- NIST SP 800-172A Revision 3 official publication ↗
- NIST OSCAL Content release used for this import ↗
Bare Metal Cyber is an independent educational publisher and is not affiliated with or endorsed by NIST. The official publications, the responsible federal agency, and the governing contract or agreement determine applicability, tailoring, assessment depth, and required implementation.