ID.RA-10 Critical suppliers are assessed prior to acquisition

Statement

Critical suppliers are assessed prior to acquisition

Guidance

Conduct supplier risk assessments against business and applicable cybersecurity requirements, including the supply chain

1. Επισκόπηση

1.1 Παραπομπές

• 5.1 Supply chain security policy
• 6.1 Security in acquisition of ICT services or ICT products
• 13.1 Supporting utilities

1.2 Εντοπισμένες απαιτήσεις

1.3 Σχετικοί κανονισμοί

2. Εντοπισμένες απαιτήσεις

3. Σχετικοί κανονισμοί

Συνδεδεμένα ζητήματα

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final