OSCAL Parameters within SR-1: Policy and Procedures
an official to manage the development, documentation, and dissemination of the supply chain risk management policy and procedures is defined;