Assessment Objective
Determine if:
- SR-02(01) a supply chain risk management team consisting of [Assignment: personnel, roles and responsibilities] is established to lead and support [Assignment: supply chain risk management activities].
Assessment Methods
Examine
- Supply chain risk management policy
- supply chain risk management procedures
- supply chain risk management team charter documentation
- supply chain risk management strategy
- supply chain risk management implementation plan
- procedures addressing supply chain protection
- system security plan
- privacy plan
- other relevant documents or records
Interview
- Organizational personnel with acquisition responsibilities
- organizational personnel with information security and privacy responsibilities
- organizational personnel with supply chain risk management responsibilities
- organizational personnel with enterprise risk management responsibilities
- legal counsel
- organizational personnel with business continuity responsibilities
Linked Issues
| Linktype | Issue |
|---|---|
| blocks | SR-02(01) [H] Establish SCRM Team |