outsourced from the organization.”
u System and Communications Protection—“Organizations must…(ii)
employ architectural designs, software development techniques, and
systems engineering principles that promote effective information