CCI-003363

The organization implements anti-counterfeit procedures that include the means to prevent counterfeit components from entering the information system.

Implementation Guidance

The organization being inspected/assessed implements the procedures defined in SA-19, CCIs 3359 that include the means to prevent counterfeit components from entering the information system.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the procedures defined in SA-19, CCIs 3359 and any artifacts applicable to counterfeit components to ensure the organization being inspected/assessed implements the procedures defined in SA-19, CCIs 3359 that include the means to prevent counterfeit components from entering the information system.

Compelling Evidence

1.) System security plan (SSP). 2.) System development life cycle (SDLC) documentation. 3.) Continuous monitoring plan for implementing anti-counterfeit policy that include the means to prevent counterfeit components from entering the information system.

The controls below (if any) were marked by NIST as being related to CCI-003363.