ID.AM-04 Inventories of services provided by suppliers are maintained

Statement

Inventories of services provided by suppliers are maintained

Guidance

Inventory all external services used by the organization, including third-party infrastructure-as-a-service (IaaS), platform-as-a-service (PaaS), and software-as-a-service (SaaS) offerings; APIs; and other externally hosted application services

Guidance

Update the inventory when a new external service is going to be utilized to ensure adequate cybersecurity risk management monitoring of the organization's use of that service

1. Prezentare generală

1.1 Referințe

• 12.4 Asset inventory

1.2 Cerințe identificate

1.3 Reglementări asociate

2. Cerințe identificate

3. Reglementări asociate

Tichete legate

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final