Contractually Enforced ()
Contracts with suppliers and third-party partners are used to implement appropriate measures designed to meet the objectives of an organization's cybersecurity program and Cyber Supply Chain Risk Management Plan.
stereotypeControlObjective
namespaceNIST_CSF
statusMANDATORY
refCodeID.SC-3
cobitAPO10.01, APO10.02, APO10.03, APO10.04, APO10.05
isa62443-20094.3.2.6.4, 4.3.2.6.7
iso27001A.15.1.1, A.15.1.2, A.15.1.3
nist-sp800-53SA-9, SA-11, SA-12, PM-9