documented critical AP is not information system applicable. components to ensure the organization being inspected/assessed defines the critical information system components for which organization-defined security safeguards are employed to ensure adequate supply. DoD has determined the critical information system components are not appropriate to define at the Enterprise level. SA-12 SA-12 (14) CCI-003223 blank blank The organization conducting NIST has not (14) the inspection/assessment allocated this AP. obtains and examines the Therefore, this documented elements, AP is not processes, and actors to applicable. ensure the organization being inspected/assessed defines the supply chain elements, processes, and actors for the information system, system component, or information system service to establish and retain unique identification IAW DoDI 5200.44. DoD has determined the elements, processes, and actors are not appropriate to define at the Enterprise level. SA-12 SA-12 (14) CCI-003221 blank blank The organization conducting NIST has not (14) the inspection/assessment allocated this AP. obtains and examines the Therefore, this documented unique AP is not identification of supply chain applicable. elements, processes, and actors to ensure the organization being inspected/assessed establishes unique identification of supply chain elements, processes, and actors defined in SA-12 (14), CCI 3223 for the information system, system component, or information system service. SA-12 SA-12 (14) CCI-003222 blank blank blank The organization conducting NIST has not (14) the inspection/assessment allocated this AP. obtains and examines Therefore, this previous versions of the AP is not identification of supply chain applicable. elements, processes, and actors documented IAW (14), CCI 3221 to ensure the organization being
documented critical information system components to ensure the organization being inspected/assessed defines the critical information system components for which organization-defined security safeguards are employed to ensure adequate supply. DoD has determined the critical information system components are not appropriate to define at the Enterprise level. AP is not applicable. SA-12 (14) SA-12 (14) CCI-003223 blank blank The organization conducting the inspection/assessment obtains and examines the documented elements, processes, and actors to ensure the organization being inspected/assessed defines the supply chain elements, processes, and actors for the information system, system component, or information system service to establish and retain unique identification IAW DoDI 5200.44. DoD has determined the elements, processes, and actors are not appropriate to define at the Enterprise level. NIST has not allocated this AP. Therefore, this AP is not applicable. SA-12 (14) SA-12 (14) CCI-003221 blank blank The organization conducting the inspection/assessment obtains and examines the documented unique identification of supply chain elements, processes, and actors to ensure the organization being inspected/assessed establishes unique identification of supply chain elements, processes, and actors defined in SA-12 (14), CCI 3223 for the information system, system component, or information system service. NIST has not allocated this AP. Therefore, this AP is not applicable. SA-12 (14) SA-12 (14) CCI-003222 blank blank blank The organization conducting the inspection/assessment obtains and examines previous versions of the identification of supply chain elements, processes, and actors documented IAW (14), CCI 3221 to ensure the organization being NIST has not allocated this AP. Therefore, this AP is not applicable.