CCI-003221

The organization establishes unique identification of organization-defined supply chain elements, processes, and actors for the information system, system component, or information system service.

Implementation Guidance

The organization being inspected/assessed establishes and documents unique identification of supply chain elements, processes, and actors defined in SA-12 (14), CCI 3223.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented unique identification of supply chain elements, processes, and actors to ensure the organization being inspected/assessed establishes unique identification of supply chain elements, processes, and actors defined in SA-12 (14), CCI 3223 for the information system, system component, or information system service.

Compelling Evidence

1.) System security plan (SSP). 2.) System development life cycle (SDLC) documentation. 3.) Continuous monitoring plan for establishing unique identification of organization-defined supply chain elements, processes and actors for the information system, system components, or information system service.

The controls below (if any) were marked by NIST as being related to CCI-003221.