|
+GV.SC-02 Cybersecurity roles and responsibilities for suppliers, customers, and partners are established, communicated, and coordinated internally and … |
GV.SC-02 Cybersecurity roles and responsibilities for suppliers, customers, and partners are established, communicated, and coordinated internally and …StatementCybersecurity roles and responsibilities for suppliers, customers, and partners are established, communicated, and coordinated internally and externally GuidanceIdentify one or more specific roles or positions that will be responsible and accountable for planning, resourcing, and executing cybersecurity supply chain risk management activities GuidanceDocument cybersecurity supply chain risk management roles and responsibilities in policy GuidanceCreate responsibility matrixes to document who will be responsible and accountable for cybersecurity supply chain risk management activities and how those teams and individuals will be consulted and informed GuidanceInclude cybersecurity supply chain risk management responsibilities and performance requirements in personnel descriptions to ensure clarity and improve accountability GuidanceDocument performance goals for personnel with cybersecurity risk management-specific responsibilities, and periodically measure them to demonstrate and improve performance GuidanceDevelop roles and responsibilities for suppliers, customers, and business partners to address shared responsibilities for applicable cybersecurity risks, and integrate them into organizational policies and applicable third-party agreements GuidanceInternally communicate cybersecurity supply chain risk management roles and responsibilities for third parties GuidanceEstablish rules and protocols for information sharing and reporting processes between the organization and its suppliers 1. Přehled
1.1 Odkazy1.2 Identifikované požadavky1.3 Související regulace2. Identifikované požadavky
3. Související regulace
Propojené úkoly |