+ID.SC Supply Chain Risk Management
---+ID.SC-01 Cyber supply chain risk management processes are identified, established, assessed, managed, and agreed to by organizational stakeholders
---+ID.SC-02 Suppliers and third party partners of information systems, components, and services are identified, prioritized, and assessed using a cyber supply …
---+ID.SC-03 Contracts with suppliers and third-party partners are used to implement appropriate measures designed to meet the objectives of an organization’s …
---+ID.SC-04 Suppliers and third-party partners are routinely assessed using audits, test results, or other forms of evaluations to confirm they are meeting their …
---+ID.SC-05 Response and recovery planning and testing are conducted with suppliers and third-party providers

ID.SC Supply Chain Risk Management

Statement

1. Prezentare generală

Titlu Standard
ID.SC-01 Cyber supply chain risk management processes are identified, established, assessed, managed, and agreed to by organizational stakeholders

Statement

Cyber supply chain risk management processes are identified, established, assessed, managed, and agreed to by organizational stakeholders

ID.SC-02 Suppliers and third party partners of information systems, components, and services are identified, prioritized, and assessed using a cyber supply …

Statement

Suppliers and third party partners of information systems, components, and services are identified, prioritized, and assessed using a cyber supply chain risk assessment process

ID.SC-03 Contracts with suppliers and third-party partners are used to implement appropriate measures designed to meet the objectives of an organization’s …

Statement

Contracts with suppliers and third-party partners are used to implement appropriate measures designed to meet the objectives of an organization’s cybersecurity program and Cyber Supply Chain Risk Management Plan.

ID.SC-04 Suppliers and third-party partners are routinely assessed using audits, test results, or other forms of evaluations to confirm they are meeting their …

Statement

Suppliers and third-party partners are routinely assessed using audits, test results, or other forms of evaluations to confirm they are meeting their contractual obligations.

ID.SC-05 Response and recovery planning and testing are conducted with suppliers and third-party providers

Statement

Response and recovery planning and testing are conducted with suppliers and third-party providers

1.1 Referințe

1.2 Cerințe identificate

1.3 Reglementări asociate

2. Cerințe identificate

Cerințe
Sursă Cerință

3. Reglementări asociate

Reglementări
Sursă Reglementare