💼 SR-8 Notification Agreements (L)(M)(H)
- Contextual name: 💼 SR-8 Notification Agreements (L)(M)(H)
- ID:
/frameworks/fedramp-moderate-security-controls/sr/08 - Located in: 💼 Supply Chain Risk Management
Description​
Establish agreements and procedures with entities involved in the supply chain for the system, system component, or system service for the [FedRAMP Assignment: notification of supply chain compromises and results of assessment or audits].
SR-8 Additional FedRAMP Requirements and Guidance:
Requirement: CSOs must ensure and document how they receive notifications from their supply chain vendor of newly discovered vulnerabilities including zero-day vulnerabilities.
Similar​
- Sections
/frameworks/fedramp-high-security-controls/sr/08
- Internal
- ID:
dec-c-032b0601
- ID:
Similar Sections (Take Policies From)​
| Section | Sub Sections | Internal Rules | Policies | Flags |
|---|---|---|---|---|
| 💼 FedRAMP High Security Controls → 💼 SR-8 Notification Agreements (L)(M)(H) |
Sub Sections​
| Section | Sub Sections | Internal Rules | Policies | Flags |
|---|