NIST 800-53 REV 5 • SUPPLY CHAIN RISK MANAGEMENT
SR-5(1) — Adequate Supply
Employ the following controls to ensure an adequate supply of {{ insert: param, sr-05.01_odp.02 }}: {{ insert: param, sr-05.01_odp.01 }}.
CMMC Practice Mapping
No direct CMMC mapping
NIST 800-171 Mapping
No direct NIST 800-171 mapping
Related Controls
Supplemental Guidance
Adversaries can attempt to impede organizational operations by disrupting the supply of critical system components or corrupting supplier operations. Organizations may track systems and component mean time to failure to mitigate the loss of temporary or permanent system function. Controls to ensure that adequate supplies of critical system components include the use of multiple suppliers throughout the supply chain for the identified critical components, stockpiling spare components to ensure operation during mission-critical times, and the identification of functionally identical or similar components that may be used, if necessary.
Practitioner Notes
Ensure adequate supply of critical components — maintain buffer stock or identify alternative sources for components essential to your operations.
Example 1: Maintain a small inventory of spare critical components — hard drives, network switches, power supplies — so a supply chain disruption does not halt your operations. Define minimum stock levels for each critical component.
Example 2: Establish contracts with multiple suppliers for critical components. If your primary supplier cannot deliver (due to shortage, trade restrictions, or compromise), you can activate the secondary supplier without a lengthy procurement process.