RA-01 Risk Assessment Policy And Procedures
Documents the Private Mendix Platform's compliance with the RA-01 control of the NIST 800-53 framework.
NIST 800-53 Risk Assessment Compliance for Private Mendix Platform
Last modified: May 22, 2026
Introduction
Documents in this section provide more information about Private Mendix Platform's compliance with the Risk Assessment (RA) category of the NIST 800-53 security framework. For each applicable control, we have listed which party (Mendix or the customer) is responsible for which component or aspect.
In general, Mendix is responsible for the Private Mendix Platform, Mendix Operator, Mendix Studio Pro, Mendix Runtime, and so on. Customer responsibilities are related to infra and organization processes. For more information, refer to detailed documentation below.
RA-02 Security Categorization
Documents the Private Mendix Platform's compliance with the RA-02 control of the NIST 800-53 framework.
RA-03 Risk Assessment
Documents the Private Mendix Platform's compliance with the RA-03 control of the NIST 800-53 framework.
RA-05 Vulnerability Scanning
Documents the Private Mendix Platform's compliance with the RA-05 control of the NIST 800-53 framework.
RA-05 (03) Vulnerability Scanning - Breadth And Depth Of Coverage
Documents the Private Mendix Platform's compliance with the RA-05 (03) control of the NIST 800-53 framework.
RA-05 (05) Vulnerability Scanning - Privileged Access
Documents the Private Mendix Platform's compliance with the RA-05 (05) control of the NIST 800-53 framework.