SA-19(2): Configuration Control For Component Service / Repair

Control Family:

System And Services Acquisition

Parent Control:

SA-19: Component Authenticity

Priority:

P0: Security control not selected in any baseline.

Threats Addressed:

Tampering

Baselines:

(Not part of any baseline)

Control is withdrawn in the next version of this control set and incorporated into: SR-11(2): Configuration Control for Component Service and Repair.

Control Statement

The organization maintains configuration control over [Assignment: organization-defined information system components] awaiting service/repair and serviced/repaired components awaiting return to service.