NIST 800-53 rev.5/Supply Chain Risk Management/996 of 1011
SR-04 (04)Provenance | Supply Chain Integrity — Pedigree
Control family: Supply Chain Risk Management
Control description
Employ [Assignment: organization-defined controls] and conduct [Assignment: organization-defined analysis] to ensure the integrity of the system and system components by validating the internal composition and provenance of critical or mission-essential technologies, products, and services.
How to implement
Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.