SR-5: Acquisition Strategies, Tools, and Methods

NIST Baseline: Low 

DIR Required By:  07/20/2023 

Review Date:  08/27/2024 

  1. Tarleton State University (Tarleton) information resource owners, or their designee, shall employ acquisition strategies, contract tools, and procurement methods to protect against, identify, and mitigate supply chain risks. 
  1. Information resource owners, or their designees, should consult with the Tarleton Office of Innovative Technology Solutions (OITS) Security Team pertaining to supply chain risks when necessary.  

References/Additional Resources

FASC18  

41 CFR 201 

EO 13873 

ISO 27036 

SP 800-30 

SP 800-161 

IR 7622