+GV.SC-06 Planning and due diligence are performed to reduce risks before entering into formal supplier or other third-party relationships

GV.SC-06 Planning and due diligence are performed to reduce risks before entering into formal supplier or other third-party relationships

Statement

Planning and due diligence are performed to reduce risks before entering into formal supplier or other third-party relationships

Guidance

Perform thorough due diligence on prospective suppliers that is consistent with procurement planning and commensurate with the level of risk, criticality, and complexity of each supplier relationship

Guidance

Assess the suitability of the technology and cybersecurity capabilities and the risk management practices of prospective suppliers

Guidance

Conduct supplier risk assessments against business and applicable cybersecurity requirements

Guidance

Assess the authenticity, integrity, and security of critical products prior to acquisition and use

1. Übersicht

Bezeichnung Standard

1.1 Referenzen

1.2 Identifizierte Anforderungen

1.3 Zugehörige Regulierungen

2. Identifizierte Anforderungen

Anforderungen
Quelle Anforderung

3. Zugehörige Regulierungen

Regulierungen
Quelle Regulierung

Verknüpfte Vorgänge