GV.SC-03 Cybersecurity supply chain risk management is integrated into cybersecurity and enterprise risk management, risk assessment, and improvement processes

Statement

Cybersecurity supply chain risk management is integrated into cybersecurity and enterprise risk management, risk assessment, and improvement processes

Guidance

Identify areas of alignment and overlap with cybersecurity and enterprise risk management

Guidance

Establish integrated control sets for cybersecurity risk management and cybersecurity supply chain risk management

Guidance

Integrate cybersecurity supply chain risk management into improvement processes

Guidance

Escalate material cybersecurity risks in supply chains to senior management, and address them at the enterprise risk management level

1. Prezentare generală

1.1 Referințe

1.2 Cerințe identificate

1.3 Reglementări asociate

2. Cerințe identificate

3. Reglementări asociate

Tichete legate

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final