Under active development Content is continuously updated and improved · Last updated Feb 18, 2026, 2:55 AM UTC

AC-4(1)Object Security And Privacy Attributes

>Control Description

The metadata relevant to C-SCRM is extensive and includes activities within the SDLC. For example, information about systems and system components, acquisition details, and delivery is considered metadata and may require appropriate protections. Enterprises should identify what metadata is directly relevant to their supply chain security and ensure that information flow enforcement is implemented in order to protect applicable metadata.

>Cross-Framework Mappings

Ask AI

Configure your API key to use AI features.