GV.SC-08 Relevant suppliers and other third parties are included in incident planning, response, and recovery activities

Statement

Relevant suppliers and other third parties are included in incident planning, response, and recovery activities

Guidance

Define and use rules and protocols for reporting incident response and recovery activities and the status between the organization and its suppliers

Guidance

Identify and document the roles and responsibilities of the organization and its suppliers for incident response

Guidance

Include critical suppliers in incident response exercises and simulations

Guidance

Define and coordinate crisis communication methods and protocols between the organization and its critical suppliers

Guidance

Conduct collaborative lessons learned sessions with critical suppliers

1. Przegląd

1.1 Odwołania

• 3.1 Incident handling policy
• 4.1 Business continuity and disaster recovery plan

1.2 Zidentyfikowane wymagania

1.3 Powiązane regulacje

2. Zidentyfikowane wymagania

3. Powiązane regulacje

Powiązane zgłoszenia

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final