Back

Acquire products through suppliers, as necessary.


CONTROL ID
13171
CONTROL TYPE
Acquisition/Sale of Assets or Services
CLASSIFICATION
Preventive

SUPPORTING AND SUPPORTED CONTROLS



This Control directly supports the implied Control(s):
  • Acquire products or services., CC ID: 11450

This Control has the following implementation support Control(s):
  • Pay suppliers in a timely manner., CC ID: 06891


SELECTED AUTHORITY DOCUMENTS COMPLIED WITH



  • Systems and applications are delivered and supported by trusted suppliers. (P2:, Australian Government Information Security Manual, March 2021)
  • Systems and applications are delivered and supported by trusted suppliers. (P2:, Australian Government Information Security Manual, June 2023)
  • Systems and applications are delivered and supported by trusted suppliers. (P2:, Australian Government Information Security Manual, September 2023)
  • support decision-making about purchase, re-use, retirement, and disposal of assets (5.2.6 ΒΆ 1 Bullet 4, ITIL Foundation, 4 Edition)
  • Purchases are made through a third party to shield the institution's identity. (App A Objective 6.19.b, FFIEC Information Technology Examination Handbook - Information Security, September 2016)