An organization is assessing risks tied to acquiring hardware components from overseas suppliers, including the possibility of counterfeits and malicious implants. Under which objective does this concern fall, and which mitigation is specifically listed for it?