+ID.SC Supply Chain Risk Management
---+ID.SC-01 Cyber supply chain risk management processes are identified, established, assessed, managed, and agreed to by organizational stakeholders
---+ID.SC-02 Suppliers and third party partners of information systems, components, and services are identified, prioritized, and assessed using a cyber supply …
---+ID.SC-03 Contracts with suppliers and third-party partners are used to implement appropriate measures designed to meet the objectives of an organization’s …
---+ID.SC-04 Suppliers and third-party partners are routinely assessed using audits, test results, or other forms of evaluations to confirm they are meeting their …
---+ID.SC-05 Response and recovery planning and testing are conducted with suppliers and third-party providers

ID.SC Supply Chain Risk Management

Statement

1. Yleiskatsaus

ID.SC-01 Cyber supply chain risk management processes are identified, established, assessed, managed, and agreed to by organizational stakeholders

Statement

Cyber supply chain risk management processes are identified, established, assessed, managed, and agreed to by organizational stakeholders
ID.SC-02 Suppliers and third party partners of information systems, components, and services are identified, prioritized, and assessed using a cyber supply …

Statement

Suppliers and third party partners of information systems, components, and services are identified, prioritized, and assessed using a cyber supply chain risk assessment process
ID.SC-03 Contracts with suppliers and third-party partners are used to implement appropriate measures designed to meet the objectives of an organization’s …

Statement

Contracts with suppliers and third-party partners are used to implement appropriate measures designed to meet the objectives of an organization’s cybersecurity program and Cyber Supply Chain Risk Management Plan.
ID.SC-04 Suppliers and third-party partners are routinely assessed using audits, test results, or other forms of evaluations to confirm they are meeting their …

Statement

Suppliers and third-party partners are routinely assessed using audits, test results, or other forms of evaluations to confirm they are meeting their contractual obligations.
ID.SC-05 Response and recovery planning and testing are conducted with suppliers and third-party providers

Statement

Response and recovery planning and testing are conducted with suppliers and third-party providers

1.1 Viittaukset

1.2 Tunnistetut vaatimukset

1.3 Liittyvät säädökset

2. Tunnistetut vaatimukset

Vaatimukset

3. Liittyvät säädökset

Säädökset