SR-9.1: Multiple Stages of System Development Life Cycle

Supply chain risk management policy and procedures

supply chain risk management plan

system and services acquisition policy

procedures addressing tamper resistance and detection

tamper protection program documentation

tamper protection tools and techniques documentation

tamper resistance and detection tools (technologies) and techniques documentation

system development life cycle documentation

procedures addressing supply chain protection

system development life cycle procedures

acquisition documentation

service level agreements

acquisition contracts for the system, system component, or system service

inter-organizational agreements and procedures

system security plan

other relevant documents or records

Organizational personnel with system and services acquisition responsibilities

organizational personnel with information security responsibilities

organizational personnel with supply chain risk management responsibilities

organizational personnel with SDLC responsibilities

Organizational processes for employing anti-tamper technologies

mechanisms supporting and/or implementing anti-tamper technologies