SR — Supply Chain Risk Management
22 controls in the Supply Chain Risk Management family
SR-1Policy and Procedures
IL4 ModIL4 HighIL5IL6
SR-2Supply Chain Risk Management Plan
IL4 ModIL4 HighIL5IL6
SR-2(1)Supply Chain Risk Management Plan | Establish SCRM Team
IL4 ModIL4 HighIL5IL6
SR-3Supply Chain Controls and Processes
IL4 ModIL4 HighIL5IL6
SR-3(1)Supply Chain Controls and Processes | Diverse Supply Base
IL5IL6
SR-3(2)Supply Chain Controls and Processes | Limitation of Harm
IL5IL6
SR-3(3)Supply Chain Controls and Processes | Sub-tier Flow Down
IL5IL6
SR-4Provenance
IL5IL6
SR-5Acquisition Strategies, Tools, and Methods
IL4 ModIL4 HighIL5IL6
SR-5(1)Acquisition Strategies, Tools, and Methods | Adequate Supply
IL5IL6
SR-5(2)Acquisition Strategies, Tools, and Methods | Assessments Prior to Selection, Acceptance, Modification, or Update
IL5IL6
SR-6Supplier Assessments and Reviews
IL4 ModIL4 HighIL5IL6
SR-6(1)Supplier Assessments and Reviews | Testing and Analysis
IL5IL6
SR-7Supply Chain Operations Security
IL5IL6
SR-8Notification Agreements
IL4 ModIL4 HighIL5IL6
SR-9Tamper Resistance and Detection
IL4 HighIL5IL6
SR-9(1)Tamper Resistance and Detection | Multiple Stages of System Development Life Cycle
IL4 HighIL5IL6
SR-10Inspection of Systems or Components
IL4 ModIL4 HighIL5IL6
SR-11Component Authenticity
IL4 ModIL4 HighIL5IL6
SR-11(1)Component Authenticity | Anti-counterfeit Training
IL4 ModIL4 HighIL5IL6
SR-11(2)Component Authenticity | Configuration Control for Component Service and Repair
IL4 ModIL4 HighIL5IL6
SR-12Component Disposal
IL4 ModIL4 HighIL5IL6