+GV.SC-03 Cybersecurity supply chain risk management is integrated into cybersecurity and enterprise risk management, risk assessment, and improvement processes

GV.SC-03 Cybersecurity supply chain risk management is integrated into cybersecurity and enterprise risk management, risk assessment, and improvement processes

Statement

Cybersecurity supply chain risk management is integrated into cybersecurity and enterprise risk management, risk assessment, and improvement processes

Guidance

Identify areas of alignment and overlap with cybersecurity and enterprise risk management

Guidance

Establish integrated control sets for cybersecurity risk management and cybersecurity supply chain risk management

Guidance

Integrate cybersecurity supply chain risk management into improvement processes

Guidance

Escalate material cybersecurity risks in supply chains to senior management, and address them at the enterprise risk management level

1. Übersicht

1.1 Referenzen

1.2 Identifizierte Anforderungen

1.3 Zugehörige Regulierungen

2. Identifizierte Anforderungen

Anforderungen

3. Zugehörige Regulierungen

Regulierungen

Verknüpfte Vorgänge

Verknüpfungen
is blocked by Security, Compliance & Resilience Program (SCRP)
is blocked by Control Objectives
is blocked by Publishing Security, Compliance & Resilience Documentation
is blocked by Defining Business Context & Mission
is blocked by Steering Committee & Program Oversight
is blocked by Risk Management Program
is blocked by Supply Chain Risk Management (SCRM) Plan
is blocked by Supply Chain Risk Assessment (SCRA)