| Text of Recommendation | We recommend that the Chief Information Security Officer develop and implement procedures to leverage the Repository for Software Attestation and Artifacts to obtain sufficient assurance that the security and supply chain controls of systems or services provided by contractors or other entities on behalf of the organization meet FISMA requirements. |
|---|---|
| Recommendation Number | 2 |
| Recommendation Status | Open |
| Significant Recommendation | No |
| Submitting OIG | |
|---|---|
| Linked Report |
