Back

Establish, implement, and maintain equipment shipping procedures.


CONTROL ID
11449
CONTROL TYPE
Acquisition/Sale of Assets or Services
CLASSIFICATION
Preventive

SUPPORTING AND SUPPORTED CONTROLS



This Control directly supports the implied Control(s):
  • Plan for selling facilities, technology, or services., CC ID: 06893

This Control has the following implementation support Control(s):
  • Ship equipment to customers in tamper-evident packaging, as necessary., CC ID: 12271
  • Ship equipment following the equipment shipping procedures., CC ID: 11658
  • Ship goods or provide services to consumers in the agreed upon time frame., CC ID: 08618


SELECTED AUTHORITY DOCUMENTS COMPLIED WITH



  • When procuring high assurance ICT equipment, the ACSC is contacted for any equipment-specific delivery procedures. (Security Control: 0286; Revision: 5, Australian Government Information Security Manual, March 2021)
  • Evaluated products are delivered in a manner consistent with any delivery procedures defined in associated evaluation documentation. (Security Control: 0285; Revision: 1, Australian Government Information Security Manual, March 2021)
  • Evaluated products are delivered in a manner consistent with any delivery procedures defined in associated evaluation documentation. (Control: ISM-0285; Revision: 1, Australian Government Information Security Manual, June 2023)
  • Evaluated products are delivered in a manner consistent with any delivery procedures defined in associated evaluation documentation. (Control: ISM-0285; Revision: 1, Australian Government Information Security Manual, September 2023)
  • If the information system is damaged or destroyed or the primary site is unavailable, necessary hardware and software will need to be activated or procured quickly and delivered to the alternate location. Three basic strategies exist to prepare for equipment replacement. (§ 3.4.4 ¶ 1, NIST SP 800-34, Contingency Planning Guide for Federal Information Systems, Rev. 1 (Final))
  • If conditions require the system to be recovered at an alternate site, certain materials will need to be transferred or procured. These items may include shipment of data backup media from offsite storage, hardware, copies of the recovery plan, and software programs. Procedures should designate the … (§ 4.3.1 ¶ 2, NIST SP 800-34, Contingency Planning Guide for Federal Information Systems, Rev. 1 (Final))