Back

Third Party and supply chain oversight


CONTROL ID
08807
CONTROL TYPE
IT Impact Zone
CLASSIFICATION
IT Impact Zone

SUPPORTING AND SUPPORTED CONTROLS




This is a top level control.

This Control has the following implementation support Control(s):
  • Establish and maintain a supply chain management program., CC ID: 11742
  • Establish, implement, and maintain supply chain due diligence standards., CC ID: 08846
  • Conduct all parts of the supply chain due diligence process., CC ID: 08854
  • Establish and maintain a supply chain due diligence report., CC ID: 08824
  • Establish and maintain third party reporting requirements., CC ID: 13289
  • Assess the effectiveness of Third Parties' services provided to the organization., CC ID: 13142
  • Establish and maintain outsourcing contracts., CC ID: 13124
  • Establish and maintain a third party payment system., CC ID: 08903
  • Establish and maintain a chain of custody or traceability system over the entire supply chain., CC ID: 08878
  • Establish and maintain third party security forces to protect the supply chain, as necessary., CC ID: 08912
  • Track the militarization of sites, routes, and trading facilities in the supply chain., CC ID: 08930
  • Establish and maintain information security controls for the supply chain., CC ID: 13109
  • Establish and maintain physical security controls for the supply chain., CC ID: 08931
  • Establish and maintain anti-counterfeit measures., CC ID: 11522
  • Establish and maintain product shipment procedures., CC ID: 08934
  • Establish and maintain a product inventory., CC ID: 08955


SELECTED AUTHORITY DOCUMENTS COMPLIED WITH




This control is an implied control and is included to maintain the legal hierarchy for your selected controls.