OSCAL Parameters within SR-1: Policy and Procedures
personnel or roles to whom supply chain risk management policy is to be disseminated to is/are defined;