OSCAL Parameters within RA-3.1: Supply Chain Risk Assessment
systems, system components, and system services to assess supply chain risks are defined;