FedRAMP Controls / RA
RA-3(1) Supply Chain Risk Assessment
Family RA
Baselines moderate
Mapped KSIs 1
Control statement
(a) Assess supply chain risks associated with {{ insert: param, ra-03.01_odp.01 }} ; and
(b) Update the supply chain risk assessment {{ insert: param, ra-03.01_odp.02 }} , when there are significant changes to the relevant supply chain, or when changes to the system, environments of operation, or other conditions may necessitate a change in the supply chain. Parameter placeholders {{ insert: param, … }} reference FedRAMP-set values in the resolved profile. Full parameter map is
preserved in the catalog database.
Covered by these Key Security Indicators
| KSI | Title | Category |
|---|---|---|
| KSI-TPR-03 | Supply Chain Risk Management _Persistently_ identify, review, and mitigate potential supply chain risks. | Third-Party Information Resources |