SA-20: Customized Development of Critical Components
From NIST's SP800-53:
Reimplement or custom develop the following critical system components: [Assignment: organization-defined critical system components].
Cyber Threat Graph Context
Explore how this control relates to the wider threat graph