Has your organization tested its contingency plans for responding to and recovering from supply chain compromise incidents where products or services were found to be counterfeit or tampered with?

This question assesses whether your organization has practiced its response to supply chain security incidents where received products or services were not authentic or were modified before delivery. Such exercises help verify that your organization can effectively detect, respond to, and recover from supply chain compromises that could introduce vulnerabilities or malicious code into your systems. Evidence could include documentation of supply chain compromise tabletop exercises, after-action reports from simulated or actual supply chain incidents, updated contingency plans based on exercise findings, or records of training sessions focused on supply chain compromise scenarios.