SA-12(6) — Minimizing Procurement Time

Minimize the time between ordering and deploying IT components to reduce the window during which products could be intercepted or tampered with in the supply chain.

Example 1: For critical security components (firewalls, HSMs, encryption appliances), order directly from the manufacturer with expedited shipping rather than using slow distribution channels. The less time a device spends in transit and warehousing, the less opportunity for tampering.

Example 2: Maintain a small inventory of critical spare parts on-site so that replacements can be deployed immediately rather than waiting for procurement and shipping cycles. Store spares in a secure, access-controlled location with inventory tracking.