SR — Supply Chain Risk Management
27 controls in the Supply Chain Risk Management family
SR-1Policy And Procedures
LOW
MODERATE
HIGH
SR-2Supply Chain Risk Management Plan
LOW
MODERATE
HIGH
SR-2(1)Establish Scrm Team
LOW
MODERATE
HIGH
SR-3Supply Chain Controls And Processes
LOW
MODERATE
HIGH
SR-3(1)Diverse Supply Base
SR-3(2)Limitation Of Harm
SR-3(3)Sub-Tier Flow Down
SR-4Provenance
SR-4(1)Identity
SR-4(2)Track And Trace
SR-4(3)Validate As Genuine And Not Altered
SR-4(4)Supply Chain Integrity -- Pedigree
SR-5Acquisition Strategies, Tools, And Methods
LOW
MODERATE
HIGH
SR-5(1)Adequate Supply
SR-5(2)Assessments Prior To Selection, Acceptance, Modification, Or Update
SR-6Supplier Assessments And Reviews
MODERATE
HIGH
SR-6(1)Testing And Analysis
SR-7Supply Chain Operations Security
SR-8Notification Agreements
LOW
MODERATE
HIGH
SR-9Tamper Resistance And Detection
HIGH
SR-9(1)Multiple Stages Of System Development Life Cycle
HIGH
SR-10Inspection Of Systems Or Components
LOW
MODERATE
HIGH
SR-11Component Authenticity
LOW
MODERATE
HIGH
SR-11(1)Anti-Counterfeit Training
LOW
MODERATE
HIGH
SR-11(2)Configuration Control For Component Service And Repair
LOW
MODERATE
HIGH
SR-11(3)Anti-Counterfeit Scanning
SR-12Component Disposal
LOW
MODERATE
HIGH