id: "SR-11(02)" title: "Configuration Control for Component Service and Repair" family: "SR" family_name: "Supply Chain Risk Management" sort_id: "sr-11.02" priority: "P1" implementation_level: "organization" parent: "SR-11" enhancement: True
Statement
Maintain configuration control over the following system components awaiting service or repair and serviced or repaired components awaiting return to service: {{ insert: param, sr-11.02_odp }}.
Guidance
None.
Assessment Objective: configuration control over {{ insert: param, sr-11.02_odp }} awaiting service or repair is maintained;
Assessment Objective: configuration control over serviced or repaired {{ insert: param, sr-11.02_odp }} awaiting return to service is maintained.
Supply chain risk management policy and procedures
supply chain risk management plan
configuration control procedures
acquisition documentation
service level agreements
acquisition contracts for the system component
inter-organizational agreements and procedures
system security plan
other relevant documents or records
Organizational personnel with system and services acquisition responsibilities
organizational personnel with information security responsibilities
organizational personnel with supply chain risk management responsibilities
Organizational processes for establishing inter-organizational agreements and procedures with supply chain entities
organizational configuration control processes