CyberStrikeus/CyberStrike - Page 144

sr-1-policy-and-procedures

Develop, document, and disseminate to [organization-defined]: [organization-defined] supply chain risk management policy that: Procedures to facilitat

sr-10-inspection-of-systems-or-components

Inspect the following systems or system components [organization-defined] to detect tampering: [organization-defined].

sr-11-1-anti-counterfeit-training

Train [organization-defined] to detect counterfeit system components (including hardware, software, and firmware).

sr-11-2-configuration-control-for-component-service-and-repair

Maintain configuration control over the following system components awaiting service or repair and serviced or repaired components awaiting return to

sr-11-3-anti-counterfeit-scanning

Scan for counterfeit system components [organization-defined].

sr-11-component-authenticity

Develop and implement anti-counterfeit policy and procedures that include the means to detect and prevent counterfeit components from entering the ...

sr-12-component-disposal

Dispose of [organization-defined] using the following techniques and methods: [organization-defined].

sr-2-1-establish-scrm-team

Establish a supply chain risk management team consisting of [organization-defined] to lead and support the following SCRM activities: [organization-de

sr-2-supply-chain-risk-management-plan

Develop a plan for managing supply chain risks associated with the research and development, design, manufacturing, acquisition, delivery, integrat...

sr-3-1-diverse-supply-base

Employ a diverse set of sources for the following system components and services: [organization-defined].

sr-3-2-limitation-of-harm

Employ the following controls to limit harm from potential adversaries identifying and targeting the organizational supply chain: [organization-define

sr-3-3-sub-tier-flow-down

Ensure that the controls included in the contracts of prime contractors are also included in the contracts of subcontractors.

sr-3-supply-chain-controls-and-processes

Establish a process or processes to identify and address weaknesses or deficiencies in the supply chain elements and processes of [organization-def...

sr-4-1-identity

Establish and maintain unique identification of the following supply chain elements, processes, and personnel associated with the identified system an

sr-4-2-track-and-trace

Establish and maintain unique identification of the following systems and critical system components for tracking through the supply chain: [organizat

sr-4-3-validate-as-genuine-and-not-altered

Employ the following controls to validate that the system or system component received is genuine and has not been altered: [organization-defined].

sr-4-4-supply-chain-integrity-pedigree

Employ [organization-defined] and conduct [organization-defined] to ensure the integrity of the system and system components by validating the interna

sr-4-provenance

Document, monitor, and maintain valid provenance of the following systems, system components, and associated data: [organization-defined].

sr-5-1-adequate-supply

Employ the following controls to ensure an adequate supply of [organization-defined]: [organization-defined].

sr-5-acquisition-strategies-tools-and-methods

Employ the following acquisition strategies, contract tools, and procurement methods to protect against, identify, and mitigate supply chain risks: [o

sr-6-1-testing-and-analysis

Employ [organization-defined] of the following supply chain elements, processes, and actors associated with the system, system component, or system se

sr-6-supplier-assessments-and-reviews

Assess and review the supply chain-related risks associated with suppliers or contractors and the system, system component, or system service they pro

sr-7-supply-chain-operations-security

Employ the following Operations Security (OPSEC) controls to protect supply chain-related information for the system, system component, or system serv

sr-8-notification-agreements

Establish agreements and procedures with entities involved in the supply chain for the system, system component, or system service for the [organizati

sr-9-1-multiple-stages-of-system-development-life-cycle

Employ anti-tamper technologies, tools, and techniques throughout the system development life cycle.

sr-9-tamper-resistance-and-detection

Implement a tamper protection program for the system, system component, or system service.

cis-ubuntu1204-v110-7-1-1

Disable IP Forwarding

cis-ubuntu1204-v110-7-1-2

Disable Send Packet Redirects

cis-ubuntu1204-v110-7-2-1

Disable Source Routed Packet Acceptance

cis-ubuntu1204-v110-7-2-2

Disable ICMP Redirect Acceptance

cis-ubuntu1204-v110-7-2-3

Disable Secure ICMP Redirect Acceptance

cis-ubuntu1204-v110-7-2-4

Log Suspicious Packets

cis-ubuntu1204-v110-7-2-5

Enable Ignore Broadcast Requests

cis-ubuntu1204-v110-7-2-6

Enable Bad Error Message Protection

cis-ubuntu1204-v110-7-2-7

Enable RFC-recommended Source Route Validation

cis-ubuntu1204-v110-7-2-8

Enable TCP SYN Cookies

cis-ubuntu1204-v110-7-3-1

Disable IPv6 Router Advertisements

cis-ubuntu1204-v110-7-3-2

Disable IPv6 Redirect Acceptance

cis-ubuntu1204-v110-7-3-3

Disable IPv6

cis-ubuntu1204-v110-7-4-1

Install TCP Wrappers