SR-5(1): Adequate Supply
Control Family:
Parent Control:
CSF v2.0 References:
Baselines:
- OT Moderate (SP 800-82r3)
- OT High (SP 800-82r3)
Control is new to this version of the control set.
Control Statement
Employ the following controls to ensure an adequate supply of [Assignment: organization-defined critical system components]: [Assignment: organization-defined controls].
Supplemental Guidance
Adversaries can attempt to impede organizational operations by disrupting the supply of critical system components or corrupting supplier operations. Organizations may track systems and component mean time to failure to mitigate the loss of temporary or permanent system function. Controls to ensure that adequate supplies of critical system components include the use of multiple suppliers throughout the supply chain for the identified critical components, stockpiling spare components to ensure operation during mission-critical times, and the identification of functionally identical or similar components that may be used, if necessary.
OT Discussion
Vendor relationships and spare parts strategies are developed to ensure that an adequate supply of critical components is available to meet operational needs.
OT Baseline Rationale
Rationale for adding to Mod, High baselines: OT systems and system components are often built for purpose and have a limited number of vendors or suppliers for a specific component. Organizations identify critical OT system components and controls to ensure an adequate supply in the event of supply chain disruptions.