RA-3.1: Supply Chain Risk Assessment

systems, system components, and system services to assess supply chain risks are defined;

the frequency at which to update the supply chain risk assessment is defined;