💼 RA-3(1) Supply Chain Risk Assessment (L)(M)(H)

• Contextual name: 💼 RA-3(1) Supply Chain Risk Assessment (L)(M)(H)
• ID: /frameworks/fedramp-high-security-controls/ra/03/01
• Located in: 💼 RA-3 Risk Assessment (L)(M)(H)

Description

(a) Assess supply chain risks associated with [Assignment: organization-defined systems, system components, and system services]; and

(b) Update the supply chain risk assessment [Assignment: organization-defined frequency], when there are significant changes to the relevant supply chain, or when changes to the system, environments of operation, or other conditions may necessitate a change in supply chain.

Similar

• Sections
  • /frameworks/nist-sp-800-53-r5/ra/03/01
• Internal
  • ID: dec-c-9a376efb

Similar Sections (Take Policies From)

Section	Sub Sections	Internal Rules	Policies	Flags
💼 NIST SP 800-53 Revision 5 → 💼 RA-3(1) Risk Assessment _ Supply Chain Risk Assessment

Similar Sections (Give Policies To)

Section	Sub Sections	Internal Rules	Policies	Flags
💼 FedRAMP Low Security Controls → 💼 RA-3(1) Supply Chain Risk Assessment (L)(M)(H)
💼 FedRAMP Moderate Security Controls → 💼 RA-3(1) Supply Chain Risk Assessment (L)(M)(H)

Sub Sections

Section	Sub Sections	Internal Rules	Policies	Flags