SR-10: Inspection of Systems or Components

Supply chain risk management policy and procedures

supply chain risk management plan

system and services acquisition policy

records of random inspections

inspection reports/results

assessment reports/results

acquisition documentation

service level agreements

acquisition contracts for the system, system component, or system service

inter-organizational agreements and procedures

system security plan

other relevant documents or records

Organizational personnel with system and services acquisition responsibilities

organizational personnel with information security responsibilities

organizational personnel with supply chain risk management responsibilities

Organizational processes for establishing inter-organizational agreements and procedures with supply chain entities

organizational processes to inspect for tampering