ID.RA-09 The authenticity and integrity of hardware and software are assessed prior to acquisition and use

Statement

The authenticity and integrity of hardware and software are assessed prior to acquisition and use

Guidance

Assess the authenticity and cybersecurity of critical technology products and services prior to acquisition and use

1. Overview

1.1 References

• 6.1 Security in acquisition of ICT services or ICT products

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

3. Related Regulations

Linked Issues

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final