SR-3_supply-chain-controls-and-processes
Establish a process or processes to identify and address weaknesses or deficiencies in the supply chain elements and processes of [organization-def...
1.21k repo starsObserved in 1 repos
DevOps & Security
DevOps & Security skills
Browse reusable Agent Skills, each with a clear purpose and practical guidance.
SR-4(1)_identity
Establish and maintain unique identification of the following supply chain elements, processes, and personnel associated with the identified system an
1.21k repo starsObserved in 1 repos
DevOps & Security
SR-4(2)_track-and-trace
Establish and maintain unique identification of the following systems and critical system components for tracking through the supply chain: [organizat
1.21k repo starsObserved in 1 repos
DevOps & Security
SR-4(3)_validate-as-genuine-and-not-altered
Employ the following controls to validate that the system or system component received is genuine and has not been altered: [organization-defined].
1.21k repo starsObserved in 1 repos
DevOps & Security
SR-4(4)_supply-chain-integrity-pedigree
Employ [organization-defined] and conduct [organization-defined] to ensure the integrity of the system and system components by validating the interna
1.21k repo starsObserved in 1 repos
DevOps & Security
SR-4_provenance
Document, monitor, and maintain valid provenance of the following systems, system components, and associated data: [organization-defined].
1.21k repo starsObserved in 1 repos
DevOps & Security
SR-5(1)_adequate-supply
Employ the following controls to ensure an adequate supply of [organization-defined]: [organization-defined].
1.21k repo starsObserved in 1 repos
DevOps & Security
SR-5(2)_assessments-prior-to-selection-acceptance-modification-or-up
Assess the system, system component, or system service prior to selection, acceptance, modification, or update.
1.21k repo starsObserved in 1 repos
DevOps & Security
SR-5_acquisition-strategies-tools-and-methods
Employ the following acquisition strategies, contract tools, and procurement methods to protect against, identify, and mitigate supply chain risks: [o
1.21k repo starsObserved in 1 repos
DevOps & Security
SR-6(1)_testing-and-analysis
Employ [organization-defined] of the following supply chain elements, processes, and actors associated with the system, system component, or system se
1.21k repo starsObserved in 1 repos
DevOps & Security