GV.SC-04 Suppliers are known and prioritized by criticality

Statement

Suppliers are known and prioritized by criticality

Guidance

Develop criteria for supplier criticality based on, for example, the sensitivity of data processed or possessed by suppliers, the degree of access to the organization's systems, and the importance of the products or services to the organization's mission

Guidance

Keep a record of all suppliers, and prioritize suppliers based on the criticality criteria

1. Επισκόπηση

1.1 Παραπομπές

• 5.1 Supply chain security policy
• 5.2 Directory of suppliers and service providers

1.2 Εντοπισμένες απαιτήσεις

1.3 Σχετικοί κανονισμοί

2. Εντοπισμένες απαιτήσεις

3. Σχετικοί κανονισμοί

Συνδεδεμένα ζητήματα

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final