💼 SR-11 Component Authenticity (L)(M)(H)

• Contextual name: 💼 SR-11 Component Authenticity (L)(M)(H)
• ID: /frameworks/fedramp-high-security-controls/sr/11
• Located in: 💼 Supply Chain Risk Management

Description

a. Develop and implement anti-counterfeit policy and procedures that include the means to detect and prevent counterfeit components from entering the system; and

b. Report counterfeit system components to [Selection (one-or-more): source of counterfeit component; [Assignment: organization-defined external reporting organizations]; [Assignment: organization-defined personnel or roles]].

SR-11 Additional FedRAMP Requirements and Guidance:

Requirement: CSOs must ensure that their supply chain vendors provide authenticity of software and patches and the vendor must have a plan to protect the development pipeline.

Similar

• Sections
  • /frameworks/nist-sp-800-53-r5/sr/11
• Internal
  • ID: dec-c-aa004b53

Similar Sections (Take Policies From)

Section	Sub Sections	Internal Rules	Policies	Flags
💼 NIST SP 800-53 Revision 5 → 💼 SR-11 Component Authenticity	3

Similar Sections (Give Policies To)

Section	Sub Sections	Internal Rules	Policies	Flags
💼 FedRAMP Low Security Controls → 💼 SR-11 Component Authenticity (L)(M)(H)	2
💼 FedRAMP Moderate Security Controls → 💼 SR-11 Component Authenticity (L)(M)(H)	2

Sub Sections

Section	Sub Sections	Internal Rules	Policies	Flags
💼 SR-11(1) Anti-counterfeit Training (L)(M)(H)
💼 SR-11(2) Configuration Control for Component Service and Repair (L)(M)(H)