BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

SA-09(02) Identification of Functions, Ports, Protocols, and Services

NIST SP 800-53 (controls) 5.2.0 against 5.2.0
All changes in this version
unchanged SA Moderate baselineHigh baseline part of SA-9

Title

Identification of Functions, Ports, Protocols, and Services

Control

Require providers of the following external system services to identify the functions, ports, protocols, and other services required for the use of such services: [Assignment: external system services].

Discussion

Information from external service providers regarding the specific functions, ports, protocols, and services used in the provision of such services can be useful when the need arises to understand the trade-offs involved in restricting certain functions and services or blocking certain ports and protocols.

Parameters

sa-09.02_odp: external system services

Related controls

cm-6, cm-7

Assessment objective

SA-09(02) providers of [Assignment: external system services] are required to identify the functions, ports, protocols, and other services required for the use of such services.

STIG rules that implement this control 0

No followed STIG rule cites a CCI indexed to this control (CCI list 2026-07-14).