DoD Cloud Computing Security Requirements Guide (CC SRG) v1r3
Section 5: Security requirements on cloud service providers and mission owners – DoD Cloud Computing Security Requirements Guide (CC SRG) v1r3

DoD Cloud Computing Security Requirements Guide (CC SRG) v1r3 5.18: Supply chain risk management plan and component authenticity

What does 5.18 require?

As part of the PA assessment package the CSP provides a supply chain risk management plan, under the FedRAMP+ controls SA-12 and SA-19, describing how it assesses and manages its supply chain and verifies component authenticity so that counterfeit, unreliable or maliciously altered hardware and software never make their way into the CSO's infrastructure or management plane.

Maintained by Gerard Blokdyk

Other controls in Section 5: Security requirements on cloud service providers and mission owners – DoD Cloud Computing Security Requirements Guide (CC SRG) v1r3

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll DoD Cloud Computing Security Requirements Guide (CC SRG) v1r3 controls