GV.OC-05 Outcomes, capabilities, and services that the organization depends on are understood and communicated

Statement

Outcomes, capabilities, and services that the organization depends on are understood and communicated

Guidance

Create an inventory of the organization's dependencies on external resources (e.g., facilities, cloud-based hosting providers) and their relationships to organizational assets and business functions

Guidance

Identify and document external dependencies that are potential points of failure for the organization's critical capabilities and services, and share that information with appropriate personnel

1. Overzicht

1.1 Referenties

• 5.1 Supply chain security policy
• 5.2 Directory of suppliers and service providers
• 13.1 Supporting utilities

1.2 Geïdentificeerde eisen

1.3 Gerelateerde regelingen

2. Geïdentificeerde eisen

3. Gerelateerde regelingen

Gekoppelde issues

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final