Tailor the selected control baseline by applying specified tailoring actions.
ID: PL-11
Enhancements:
Space Segment Guidance
Rules of behavior for developers and operators set the cultural tone for cyber hygiene. For flight projects, the document should specify that no personal USB media ever contacts the flatsat, that multi-factor tokens are mandatory for command laptops, and that chat messages referencing last-minute code edits are logged into the discrepancy-tracking system. Annual sign-off attests that each team member understands the mission-unique consequences of a mishandled credential, such as the permanent loss of a billion-dollar platform.
Exploit ground system and use to maliciously to interact with the spacecraft
Sample Requirements
SPARTA ID
Requirement
Rationale/Additional Guidance/Notes
SPR-428
The [organization] shall develop and implement a process for tailoring the control baseline for the spacecraft in accordance with organizational requirements (e.g.CNSS Space Overlay or similar).{SV-MA-6}{PL-11}
Tailoring aligns controls with mission architecture and threat model. Structured customization prevents over- or under-protection. Governance ensures justified deviations. Tailoring improves efficiency and resilience.
SPR-429
The [organization] shall develop, document, and implement policies that outline security planning processes such as writing rules of behavior, conops documentation, control baseline selection/tailoring, and similar activities that require advanced planning.{SV-MA-6}{PL-11}