NIST 800-53 REV 5 • SYSTEM AND SERVICES ACQUISITION
SA-12(3) — Trusted Shipping and Warehousing
CMMC Practice Mapping
No direct CMMC mapping
NIST 800-171 Mapping
No direct NIST 800-171 mapping
Related Controls
No related controls listed
Practitioner Notes
Protect the supply chain during shipping and warehousing to ensure products are not tampered with between the manufacturer and your facility.
Example 1: For critical hardware components, specify secure shipping requirements in your procurement contracts: tamper-evident packaging, tracked shipping, and direct shipment from the manufacturer (not through intermediaries). Inspect packaging on receipt for signs of tampering.
Example 2: When warehousing IT equipment before deployment, store it in a physically secured area with access controls and surveillance cameras. Maintain a chain of custody log that records who handled the equipment from receipt through deployment.