{"catalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","kind":"record","record":{"attributes":{"category":"administrative","domain":"Third-Party / Supply-Chain Risk","type":"preventive"},"canonicalUrl":"https://controlsmap.com/?v=1&node=uc%3AUC-TPRM-09","description":"Apply operations security safeguards to supply-chain activities: identify sensitive information about suppliers, shipments, configurations, and delivery schedules, protect it from collection by adversaries, and limit its disclosure to parties with a validated need to know.","details":{"control_category":"administrative","control_type":"preventive","domain":"Third-Party / Supply-Chain Risk","guidance":[],"members":[{"control_id":"SR-7","coverage":"full","framework":"nist-800-53","relationship":"equal"}],"statement":"Apply operations security safeguards to supply-chain activities: identify sensitive information about suppliers, shipments, configurations, and delivery schedules, protect it from collection by adversaries, and limit its disclosure to parties with a validated need to know.","title":"Protect supply chain information through OPSEC","unified_id":"UC-TPRM-09"},"id":"uc:UC-TPRM-09","mapUrl":"https://controlsmap.com/?v=1&node=uc%3AUC-TPRM-09","sourceIds":["nist-800-53"],"sourceUrl":null,"title":"UC-TPRM-09 — Protect supply chain information through OPSEC","type":"unified"},"relationships":[{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:24502ff03a69d28f5d40639734c82e5611e8dafee3afefd29b103fcf579cc256","properties":{},"sourceDetailPath":"/data/v1/records/wf-c60-62941eb6.json","sourceId":"wf:C60","targetDetailPath":"/data/v1/records/uc-uc-tprm-09-eb9772d0.json","targetId":"uc:UC-TPRM-09","type":"operates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:6ce4ef526661cc9431a1aaefd7ae287240ab4336e5bc0b9894e78e82cc6faf34","properties":{"control_id":"SR-7","coverage":"full","delta":null,"framework":"nist-800-53","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"equal","source_version":"Rev. 5"},"sourceDetailPath":"/data/v1/records/uc-uc-tprm-09-eb9772d0.json","sourceId":"uc:UC-TPRM-09","targetDetailPath":"/data/v1/records/ctrl-nist-800-53-sr-7-4ae4857e.json","targetId":"ctrl:nist-800-53:SR-7","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:8655ad7119fd2f4fdea22e527b93ac4b19a77ddd7e89a67f39f82900f6302a6d","properties":{},"sourceDetailPath":"/data/v1/records/wf-g13-0f34ff59.json","sourceId":"wf:G13","targetDetailPath":"/data/v1/records/uc-uc-tprm-09-eb9772d0.json","targetId":"uc:UC-TPRM-09","type":"oversees"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:b21541cdd20f33929933860c36e86af5d0ff50fab626be6b377557b8f892e2f7","properties":{},"sourceDetailPath":"/data/v1/records/wf-c9-75fb1752.json","sourceId":"wf:C9","targetDetailPath":"/data/v1/records/uc-uc-tprm-09-eb9772d0.json","targetId":"uc:UC-TPRM-09","type":"tests"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:e765571a8e4ff68f52862f3ba7a0920f9e38f78855b7c362d2b12fe203ff7259","properties":{"rationale":"Protecting sensitive info on suppliers, shipments, configurations, and delivery schedules from adversary collection denies the intelligence needed to intercept and inject into the supply chain.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-tprm-09-eb9772d0.json","sourceId":"uc:UC-TPRM-09","targetDetailPath":"/data/v1/records/risk-tprm-supply-chain-injection-ad1f5937.json","targetId":"risk:tprm-supply-chain-injection","type":"mitigates"}],"schemaVersion":1}