SR-11(1)

Requirement

Train [Assignment: organization-defined personnel or roles] to detect counterfeit system components (including hardware, software, and firmware).

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: Supply chain risk management policy and procedures; supply chain risk management plan; system and services acquisition policy; anti-counterfeit plan; anti-counterfeit policy and procedures; media disposal policy; media protection policy; incident response policy; training materials addressing counterfeit system components; training records on the detection and prevention of counterfeit components entering the system; system security plan; other relevant documents or records].

Interview

[SELECT FROM: Organizational personnel with information security responsibilities; organizational personnel with supply chain risk management responsibilities; organizational personnel with responsibilities for anti-counterfeit policies, procedures, and training].

ID	Assessment Objectives
SR-11(01)	<SR-11(01)_ODP personnel or roles> are trained to detect counterfeit system components (including hardware, software, and firmware).

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!