SR - Supply Chain Risk Management

The SR family addresses the planning, assessment, and mitigation of risks associated with the acquisition, development, and maintenance of information system components and services throughout the supply chain. It requires organizations to establish processes for evaluating suppliers, enforcing security requirements, monitoring for threats, and responding to incidents that could affect system integrity, confidentiality, or availability.