Supply chain risk management policy and procedures
supply chain risk management plan
system and services acquisition policy
procedures addressing supply chain protection
procedures addressing tamper resistance and detection
tamper protection program documentation
tamper protection tools and techniques documentation
tamper resistance and detection tools and techniques documentation
acquisition documentation
service level agreements
acquisition contracts for the system, system component, or system service
system security plan
other relevant documents or records