BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

IR-04(10) Supply Chain Coordination

NIST SP 800-53 (controls) 5.2.0 against 5.2.0
All changes in this version
unchanged IR part of IR-4

Title

Supply Chain Coordination

Control

Coordinate incident handling activities involving supply chain events with other organizations involved in the supply chain.

Discussion

Organizations involved in supply chain activities include product developers, system integrators, manufacturers, packagers, assemblers, distributors, vendors, and resellers. Supply chain incidents can occur anywhere through or to the supply chain and include compromises or breaches that involve primary or sub-tier providers, information technology products, system components, development processes or personnel, and distribution processes or warehousing facilities. Organizations consider including processes for protecting and sharing incident information in information exchange agreements and their obligations for reporting incidents to government oversight bodies (e.g., Federal Acquisition Security Council).

Related controls

ca-3, ma-2, sa-9, sr-8

Assessment objective

IR-04(10) incident handling activities involving supply chain events are coordinated with other organizations involved in the supply chain.

STIG rules that implement this control 0

No followed STIG rule cites a CCI indexed to this control (CCI list 2026-07-14).