|
+GV.SC-09 Supply chain security practices are integrated into cybersecurity and enterprise risk management programs, and their performance is monitored … |
GV.SC-09 Supply chain security practices are integrated into cybersecurity and enterprise risk management programs, and their performance is monitored …StatementSupply chain security practices are integrated into cybersecurity and enterprise risk management programs, and their performance is monitored throughout the technology product and service life cycle GuidancePolicies and procedures require provenance records for all acquired technology products and services GuidancePeriodically provide risk reporting to leaders about how acquired components are proven to be untampered and authentic GuidanceCommunicate regularly among cybersecurity risk managers and operations personnel about the need to acquire software patches, updates, and upgrades only from authenticated and trustworthy software providers GuidanceReview policies to ensure that they require approved supplier personnel to perform maintenance on supplier products GuidancePolicies and procedure require checking upgrades to critical hardware for unauthorized changes 1. Přehled
1.1 Odkazy1.2 Identifikované požadavky1.3 Související regulace2. Identifikované požadavky
3. Související regulace
Propojené úkoly |