|
controlSR-2

Supply Chain Risk Management Plan (SR-2)

Develop a plan for managing supply chain risks associated with the research and development, design, manufacturing, acquisition, delivery, integration, operations and maintenance, and disposal of the following systems, system components or system services: [organization-defined]; Review and update the supply chain risk management plan [organization-defined] or as required, to address threat, organizational or environmental changes; and Protect the supply chain risk management plan from unauthori

Security Baselines

LOWMODERATEHIGH
supply-chainacquisitionthird-partyrisk

Why These Connect

Baselined In3

This control is included in the linked security baseline (LOW, MODERATE, or HIGH).

Supports28

These related controls work together — a change to one may affect the others.

Mitigates1

This control helps defend against or reduce the risk of the linked threat technique.

Enhances1

These enhancements add specific capabilities or refinements to the base control.

Threat Coverage(1 ATT&CK techniques)

Control Enhancements(1)