CCI-003356

The organization develops an anti-counterfeit policy that includes the means to detect counterfeit components from entering the information system.

Implementation Guidance

The organization being inspected/assessed develops and documents an anti-counterfeit policy that include the means to detect counterfeit components from entering the information system.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented anti-counterfeit policy to ensure the organization being inspected/assessed develops an anti-counterfeit policy that include the means to detect counterfeit components from entering the information system.

Compelling Evidence

1.) System security plan (SSP). 2.) System development life cycle (SDLC) documentation. 3.) Continuous monitoring plan for developing anti-counterfeit policy that include the means to detect counterfeit components from entering the information system.

The controls below (if any) were marked by NIST as being related to CCI-003356.