CCI-003222

The organization retains unique identification of organization-defined supply chain elements, processes, and actors for the information system, system component, or information system service.

Implementation Guidance

The organization being inspected/assessed retains previous versions of the unique identification of supply chain elements, processes, and actors documented IAW SA-12 (14), CCI 3221.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines previous versions of the identification of supply chain elements, processes, and actors documented IAW SA-12 (14), CCI 3221 to ensure the organization being inspected/assessed retains unique identification of supply chain elements, processes, and actors.

Compelling Evidence

1.) System security plan (SSP). 2.) System development life cycle (SDLC) documentation. 3.) Continuous monitoring plan for retaining unique identification of organization-defined supply chain elements, processes and actors for the information system, system components, or information system service.

The controls below (if any) were marked by NIST as being related to CCI-003222.