ID.RA-09:
The authenticity and integrity of hardware and software are assessed prior to acquisition and use
Implementation Examples
Ex1:
Assess the authenticity and cybersecurity of critical technology products and services prior to acquisition and use