Apakšuzdevumi
| Nosaukums | Apraksts |
|---|---|
| Third-Party Cybersecurity Compromise / Exposure | A supplier or External Service Provider (ESP) experiencing a cybersecurity weakness, incident or compromise causes loss of Confidentiality, Integrity, Availability and/or Safety (CIAS) in organizational products, services, data or operations. |
| Third-Party Physical Security Disruption / Exposure | A physical security event affecting a supplier's or External Service Provider's (ESP) facilities, personnel, equipment or other assets disrupts or compromises products, services, data or operations relied upon by the organization. |
| Sub-Tier / Fourth-Party Supply Chain Exposure | Risks originating from a supplier's or External Service Provider's (ESP) own suppliers, subcontractors or dependencies propagate through the supply chain and affect organizational Confidentiality, Integrity, Availability and/or Safety (CIAS), compliance and/or operations. |
| Third-Party Legal / Compliance Exposure | Third-party noncompliance, unlawful conduct, sanctions, litigation or other legal conditions cause the organization to: (1) Violate obligations; (2) Lose contracts; (3) Incur legal and/or financial liability; and/or (4) Experience operational restrictions. |
| Harm from Unauthorized / Unintended Product or Service Use | A product or service is used outside its authorized, intended or approved purpose, creating security, data privacy, safety, legal, operational or financial harm. |
| Third-Party Dependency Failure | A critical third-party product, service or capability becomes unavailable, degraded, discontinued or otherwise unable to support required operations, causing business operations disruption. |
| Third-Party Cybersecurity Compromise / Exposure | A supplier or External Service Provider (ESP) experiencing a cybersecurity weakness, incident or compromise causes loss of Confidentiality, Integrity, Availability and/or Safety (CIAS) in organizational products, services, data or operations. |
| Third-Party Physical Security Disruption / Exposure | A physical security event affecting a supplier's or External Service Provider's (ESP) facilities, personnel, equipment or other assets disrupts or compromises products, services, data or operations relied upon by the organization. |
| Sub-Tier / Fourth-Party Supply Chain Exposure | Risks originating from a supplier's or External Service Provider's (ESP) own suppliers, subcontractors or dependencies propagate through the supply chain and affect organizational Confidentiality, Integrity, Availability and/or Safety (CIAS), compliance and/or operations. |
| Third-Party Legal / Compliance Exposure | Third-party noncompliance, unlawful conduct, sanctions, litigation or other legal conditions cause the organization to: (1) Violate obligations; (2) Lose contracts; (3) Incur legal and/or financial liability; and/or (4) Experience operational restrictions. |
| Harm from Unauthorized / Unintended Product or Service Use | A product or service is used outside its authorized, intended or approved purpose, creating security, data privacy, safety, legal, operational or financial harm. |
| Third-Party Dependency Failure | A critical third-party product, service or capability becomes unavailable, degraded, discontinued or otherwise unable to support required operations, causing business operations disruption. |
| Counterfeit / Non-Conforming Component Impact | Counterfeit, substituted, defective or non-conforming products or components cause reliability, security, safety, warranty or operational failures in organizational Technology Assets, Applications and/or Services (TAAS). |
| Third-Party Cybersecurity Compromise / Exposure | A supplier or External Service Provider (ESP) experiencing a cybersecurity weakness, incident or compromise causes loss of Confidentiality, Integrity, Availability and/or Safety (CIAS) in organizational products, services, data or operations. |
| Third-Party Physical Security Disruption / Exposure | A physical security event affecting a supplier's or External Service Provider's (ESP) facilities, personnel, equipment or other assets disrupts or compromises products, services, data or operations relied upon by the organization. |
| Sub-Tier / Fourth-Party Supply Chain Exposure | Risks originating from a supplier's or External Service Provider's (ESP) own suppliers, subcontractors or dependencies propagate through the supply chain and affect organizational Confidentiality, Integrity, Availability and/or Safety (CIAS), compliance and/or operations. |
| Third-Party Legal / Compliance Exposure | Third-party noncompliance, unlawful conduct, sanctions, litigation or other legal conditions cause the organization to: (1) Violate obligations; (2) Lose contracts; (3) Incur legal and/or financial liability; and/or (4) Experience operational restrictions. |
| Harm from Unauthorized / Unintended Product or Service Use | A product or service is used outside its authorized, intended or approved purpose, creating security, data privacy, safety, legal, operational or financial harm. |
| Third-Party Dependency Failure | A critical third-party product, service or capability becomes unavailable, degraded, discontinued or otherwise unable to support required operations, causing business operations disruption. |
| Counterfeit / Non-Conforming Component Impact | Counterfeit, substituted, defective or non-conforming products or components cause reliability, security, safety, warranty or operational failures in organizational Technology Assets, Applications and/or Services (TAAS). |
| Third-Party Cybersecurity Compromise / Exposure | A supplier or External Service Provider (ESP) experiencing a cybersecurity weakness, incident or compromise causes loss of Confidentiality, Integrity, Availability and/or Safety (CIAS) in organizational products, services, data or operations. |
| Third-Party Physical Security Disruption / Exposure | A physical security event affecting a supplier's or External Service Provider's (ESP) facilities, personnel, equipment or other assets disrupts or compromises products, services, data or operations relied upon by the organization. |
| Sub-Tier / Fourth-Party Supply Chain Exposure | Risks originating from a supplier's or External Service Provider's (ESP) own suppliers, subcontractors or dependencies propagate through the supply chain and affect organizational Confidentiality, Integrity, Availability and/or Safety (CIAS), compliance and/or operations. |
| Third-Party Legal / Compliance Exposure | Third-party noncompliance, unlawful conduct, sanctions, litigation or other legal conditions cause the organization to: (1) Violate obligations; (2) Lose contracts; (3) Incur legal and/or financial liability; and/or (4) Experience operational restrictions. |
| Harm from Unauthorized / Unintended Product or Service Use | A product or service is used outside its authorized, intended or approved purpose, creating security, data privacy, safety, legal, operational or financial harm. |
| Third-Party Dependency Failure | A critical third-party product, service or capability becomes unavailable, degraded, discontinued or otherwise unable to support required operations, causing business operations disruption. |
| Counterfeit / Non-Conforming Component Impact | Counterfeit, substituted, defective or non-conforming products or components cause reliability, security, safety, warranty or operational failures in organizational Technology Assets, Applications and/or Services (TAAS). |
- Secure Controls Framework -
EN: GRCA includes the Secure Controls Framework® (SCF) content, © Secure Controls Framework Council, LLC, used under the Creative Commons Attribution-NoDerivatives 4.0 International Public License. SCF control numbers, names, descriptions and mappings appear exactly as published by the SCF Council – https://securecontrolsframework.com. GRCA may group or reorder SCF content for display, which does not change SCF content; the mappings are shown as links to the frameworks they name. Learn more at https://securecontrolsframework.com.
DE: GRCA enthält Inhalte des Secure Controls Framework® (SCF), © Secure Controls Framework Council, LLC, genutzt unter der Creative Commons Attribution-NoDerivatives 4.0 International Public License. Nummern, Namen, Beschreibungen und Zuordnungen der SCF-Controls erscheinen genau so, wie der SCF Council sie veröffentlicht – https://securecontrolsframework.com. GRCA gruppiert oder sortiert SCF-Inhalte für die Anzeige, ohne sie zu verändern; die Zuordnungen erscheinen als Verknüpfungen zu den genannten Regelwerken. Mehr unter https://securecontrolsframework.com.