NIST 800-53 Browser

Review Progress Your data

Back up your data

Viewing

ReviewingBack to Review Next item →

← SA — System and Services Acquisition

SA-12 Supply Chain Protection

Withdrawn

Withdrawn — see SR

Enhancements

SA-12(1)Acquisition Strategies / Tools / MethodsWithdrawn

Withdrawn — see SR-5

SA-12(2)Supplier ReviewsWithdrawn

Withdrawn — see SR-6

SA-12(3)Trusted Shipping and WarehousingWithdrawn

Withdrawn — see SR-3

SA-12(4)Diversity of SuppliersWithdrawn

Withdrawn — see SR-3(1)

SA-12(5)Limitation of HarmWithdrawn

Withdrawn — see SR-3(2)

SA-12(6)Minimizing Procurement TimeWithdrawn

Withdrawn — see SR-5(1)

SA-12(7)Assessments Prior to Selection / Acceptance / UpdateWithdrawn

Withdrawn — see SR-5(2)

SA-12(8)Use of All-source IntelligenceWithdrawn

Withdrawn — see RA-3(2)

SA-12(9)Operations SecurityWithdrawn

Withdrawn — see SR-7

SA-12(10)Validate as Genuine and Not AlteredWithdrawn

Withdrawn — see SR-4(3)

SA-12(11)Penetration Testing / Analysis of Elements, Processes, and ActorsWithdrawn

Withdrawn — see SR-6(1)

SA-12(12)Inter-organizational AgreementsWithdrawn

Withdrawn — see SR-8

SA-12(13)Critical Information System ComponentsWithdrawn

Withdrawn — see MA-6, RA-9

SA-12(14)Identity and TraceabilityWithdrawn

Withdrawn — see SR-4(1), SR-4(2)

SA-12(15)Processes to Address Weaknesses or DeficienciesWithdrawn

Withdrawn — see SR-3

No Enhancements match this Baseline.

ISO/IEC 27001:2022 Crosswalk

No ISO 27001 mapping published for this control.

Electronic (OSCAL) Version of NIST SP 800-53 Rev 5.2.0 Controls and SP 800-53A Rev 5.2.0 Assessment Procedures — Catalog v5.2.0. ISO/IEC 27001:2022 crosswalk transcribed 2026-09-17.

This is an unofficial reading tool — not a substitute for the published NIST SP 800-53 Rev 5 document in any audit or compliance context.