SR-3: Supply Chain Controls and Processes

Statement

• a.

  Establish a process or processes to identify and address weaknesses or deficiencies in the supply chain elements and processes of system or system component in coordination with supply chain personnel ;

• b.

  Employ the following controls to protect against supply chain risks to the system, system component, or system service and to limit the harm or consequences from supply chain-related events: supply chain controls ; and

• c.

  Document the selected and implemented supply chain processes and controls in sr-03_odp.04 .

• • Requirement:

    CSO must document and maintain the supply chain custody, including replacement devices, to ensure the integrity of the devices before being introduced to the boundary.