SR-03(01) Diverse Supply Base
All changes in this version
Title
Diverse Supply Base
Control
Employ a diverse set of sources for the following system components and services: [Assignment: organization-defined system components and services].
Discussion
Diversifying the supply of systems, system components, and services can reduce the probability that adversaries will successfully identify and target the supply chain and can reduce the impact of a supply chain event or compromise. Identifying multiple suppliers for replacement components can reduce the probability that the replacement component will become unavailable. Employing a diverse set of developers or logistics service providers can reduce the impact of a natural disaster or other supply chain event. Organizations consider designing the system to include diverse materials and components.
Parameters
sr-3.1_prm_1: organization-defined system components and services
sr-03.01_odp.01: system components
sr-03.01_odp.02: services
STIG rules that implement this control 0
No followed STIG rule cites a CCI indexed to this control (CCI list 2026-07-14).