SR-11(3): Anti-counterfeit Scanning
(Not part of any baseline)
Control is new to this version of the control set and incorporates the following control from the previous version: SA-19(4): Anti-Counterfeit Scanning.
Scan for counterfeit system components [Assignment: organization-defined frequency].
The type of component determines the type of scanning to be conducted (e.g., web application scanning if the component is a web application).