Assessment Objective
Determine if:
- agreements and procedures are established with entities involved in the supply chain for the system, system components, or system service for [Assignment: SELECTED PARAMETER VALUE(S)].
Assessment Methods
Examine
- Supply chain risk management policy and procedures
- supply chain risk management plan
- system and services acquisition policy
- acquisition contracts for the system, system component, or system service
- procedures addressing supply chain protection
- acquisition documentation
- service-level agreements
- system security plan
- inter-organizational agreements and procedures
- other relevant documents or records
Interview
- Personnel with system and service acquisition responsibilities
- personnel with information security responsibilities
- personnel with supply chain risk management responsibilities
Test
- Processes for establishing inter-organizational agreements and procedures with supply chain entities
Pedidos ligados
| Tipo de ligação | Pedido |
|---|---|
| blocks | 03.17.01E Notification Agreements |