BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

SR-03(03) Sub-tier Flow Down

NIST SP 800-53 (controls) 5.1.1+u4
All changes in this version
first version loaded SR part of SR-3

Title

Sub-tier Flow Down

Control

Ensure that the controls included in the contracts of prime contractors are also included in the contracts of subcontractors.

Discussion

To manage supply chain risk effectively and holistically, it is important that organizations ensure that supply chain risk management controls are included at all tiers in the supply chain. This includes ensuring that Tier 1 (prime) contractors have implemented processes to facilitate the "flow down" of supply chain risk management controls to sub-tier contractors. The controls subject to flow down are identified in [SR-3b](#sr-3_smt.b).

Related controls

sr-5, sr-8

Assessment objective

SR-03(03) the controls included in the contracts of prime contractors are also included in the contracts of subcontractors.

STIG rules that implement this control 0

No followed STIG rule cites a CCI indexed to this control (CCI list 2026-07-14).