+SR-04(02) Track and Trace
|
SR-04(02) Track and Trace
Control
Establish and maintain unique identification of the following systems and critical system components for tracking through the supply chain: [Assignement: systems and critical system components].
Discussion
Tracking the unique identification of systems and system components during development and transport activities provides a foundational identity structure for the establishment and maintenance of provenance. For example, system components may be labeled using serial numbers or tagged using radio-frequency identification tags. Labels and tags can help provide better visibility into the provenance of a system or system component. A system or system component may have more than one unique identifier. Identification methods are sufficient to support a forensic investigation after a supply chain compromise or event.
Assessment Objective
- the unique identification of [Assignement: systems and critical system components] is established for tracking through the supply chain;
- the unique identification of [Assignement: systems and critical system components] is maintained for tracking through the supply chain.
Assessment Method
Examine
Supply chain risk management policy and procedures
system and services acquisition policy
procedures addressing supply chain protection
procedures addressing the integration of information security requirements into the acquisition process
supply chain risk management plan
list of supply chain elements, processes, and actors (associated with the system, system component, or system service) requiring implementation of unique identification processes, procedures, tools, mechanisms, equipment, techniques, and/or configurations
system security plan
other relevant documents or records
Interview
Organizational personnel with system and services acquisition responsibilities
organizational personnel with information security responsibilities
organizational personnel with supply chain protection responsibilities
organizational personnel with responsibilities for establishing and retaining the unique identification of supply chain elements, processes, and actors
1. Oversigt
1.1 Referencer
1.2 Identificerede krav
1.3 Relaterede reguleringer
2. Identificerede krav
3. Relaterede reguleringer
Reguleringer
| Kilde |
Regulering |
Linkede sager
|