+PM-30(01) Suppliers of Critical or Mission-essential Items
|
PM-30(01) Suppliers of Critical or Mission-essential Items
Control
Identify, prioritize, and assess suppliers of critical or mission-essential technologies, products, and services.
Discussion
The identification and prioritization of suppliers of critical or mission-essential technologies, products, and services is paramount to the mission/business success of organizations. The assessment of suppliers is conducted using supplier reviews (see [SR-6](#sr-6) ) and supply chain risk assessment processes (see [RA-3(1)](#ra-3.1) ). An analysis of supply chain risk can help an organization identify systems or components for which additional supply chain risk mitigations are required.
Assessment Objective
- suppliers of critical or mission-essential technologies, products, and services are identified;
- suppliers of critical or mission-essential technologies, products, and services are prioritized;
- suppliers of critical or mission-essential technologies, products, and services are assessed.
Assessment Method
Examine
Supply chain risk management strategy
organization-wide risk management strategy
enterprise risk management documents
inventory records or suppliers
assessment and prioritization documentation
critical or mission-essential technologies, products, and service documents or records
other relevant documents or records
Interview
Organizational personnel with supply chain risk management responsibilities
organizational personnel with information security responsibilities
organizational personnel with acquisition responsibilities
organizational personnel with enterprise risk management responsibilities
1. Apžvalga
1.1 Nuorodos
1.2 Nustatyti reikalavimai
1.3 Susiję teisės aktai
2. Nustatyti reikalavimai
Reikalavimai
| Šaltinis |
Reikalavimas |
3. Susiję teisės aktai
Teisės aktai
| Šaltinis |
Reguliavimas |
Susietos užduotys
|