Skip to main content

💼 SR-2 Supply Chain Risk Management Plan (L)(M)(H)

  • Contextual name: 💼 SR-2 Supply Chain Risk Management Plan (L)(M)(H)
  • ID: /frameworks/fedramp-moderate-security-controls/sr/02
  • Located in: 💼 Supply Chain Risk Management

Description​

a. Develop a plan for managing supply chain risks associated with the research and development, design, manufacturing, acquisition, delivery, integration, operations and maintenance, and disposal of the following systems, system components or system services [Assignment: organization-defined systems, system components, or system services]

b. Review and update the supply chain risk management plan [FedRAMP Assignment: at least annually] or as required, to address threat, organizational or environmental changes; and

c. Protect the supply chain risk management plan from unauthorized disclosure and modification.

Similar​

  • Sections
    • /frameworks/fedramp-high-security-controls/sr/02
  • Internal
    • ID: dec-c-e25d0f35

Similar Sections (Take Policies From)​

SectionSub SectionsInternal RulesPoliciesFlags
💼 FedRAMP High Security Controls → 💼 SR-2 Supply Chain Risk Management Plan (L)(M)(H)1

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlags
💼 SR-2(1) Establish SCRM Team (L)(M)(H)