GV.SC-03 Cybersecurity supply chain risk management is integrated into cybersecurity and enterprise risk management, risk assessment, and improvement processes

Statement

Cybersecurity supply chain risk management is integrated into cybersecurity and enterprise risk management, risk assessment, and improvement processes

Example

Identify areas of alignment and overlap with cybersecurity and enterprise risk management

Example

Establish integrated control sets for cybersecurity risk management and cybersecurity supply chain risk management

Example

Integrate cybersecurity supply chain risk management into improvement processes

Example

Escalate material cybersecurity risks in supply chains to senior management, and address them at the enterprise risk management level

1. Oversigt

1.1 Referencer

1.2 Identificerede krav

1.3 Relaterede reguleringer

2. Identificerede krav

3. Relaterede reguleringer

Linkede sager

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final