Skip to main content

πŸ’Ό RA-3(1) Supply Chain Risk Assessment (L)(M)(H)

  • Contextual name: πŸ’Ό RA-3(1) Supply Chain Risk Assessment (L)(M)(H)
  • ID: /frameworks/fedramp-moderate-security-controls/ra/03/01
  • Located in: πŸ’Ό RA-3 Risk Assessment (L)(M)(H)

Description​

(a) Assess supply chain risks associated with [Assignment: organization-defined systems, system components, and system services]; and

(b) Update the supply chain risk assessment [Assignment: organization-defined frequency], when there are significant changes to the relevant supply chain, or when changes to the system, environments of operation, or other conditions may necessitate a change in supply chain.

Similar​

  • Sections
    • /frameworks/fedramp-high-security-controls/ra/03/01
  • Internal
    • ID: dec-c-9a376efb

Similar Sections (Take Policies From)​

SectionSub SectionsInternal RulesPoliciesFlags
πŸ’Ό FedRAMP High Security Controls β†’ πŸ’Ό RA-3(1) Supply Chain Risk Assessment (L)(M)(H)

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlags