OSCAL Parameters within SR-1: Policy and Procedures
personnel or roles to whom supply chain risk management procedures are disseminated to is/are defined;