GV.SC-08 Relevant suppliers and other third parties are included in incident planning, response, and recovery activities

Statement

Relevant suppliers and other third parties are included in incident planning, response, and recovery activities

Guidance

Define and use rules and protocols for reporting incident response and recovery activities and the status between the organization and its suppliers

Guidance

Identify and document the roles and responsibilities of the organization and its suppliers for incident response

Guidance

Include critical suppliers in incident response exercises and simulations

Guidance

Define and coordinate crisis communication methods and protocols between the organization and its critical suppliers

Guidance

Conduct collaborative lessons learned sessions with critical suppliers

1. Vue d’ensemble

1.1 Références

• 3.1 Incident handling policy
• 4.1 Business continuity and disaster recovery plan

1.2 Exigences identifiées

1.3 Réglementations associées

2. Exigences identifiées

3. Réglementations associées

Tickets liés

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final