ID.SC-5: Supply Chain Risk Management
Response and recovery planning and testing are conducted with suppliers and third-party providers.
ID.SC-4: Supply Chain Risk Management
Suppliers and third-party partners are routinely assessed using audits, test results, or other forms of evaluations to confirm they are meeting their contractual obligations.
ID.SC-3: Supply Chain Risk Management
Suppliers and third-party partners are identified, prioritized, and assessed using a cybersecurity risk assessment process.
ID.BE-2 Business Environment-2
The organization’s place in critical infrastructure and its industry sector is identified and communicated.
Identity Management, Authentication and Access Control
The organization’s role in the supply chain is identified and communicated.