CCI-000725

The organization conducts a due diligence review of suppliers prior to entering into contractual agreements to acquire information system hardware.

Implementation Guidance

Validation Procedures

The controls below (if any) were marked by NIST as being related to CCI-000725.