Best Practice Detail

13-8-8710

Network Operators, Service Providers, and Equipment Suppliers should ensure supply chain security by having security language in their contracts and periodic risk assessments on their 3rd party verifying the outside party's security practices.

Status: Rollover New

References/Comments: "NIST 800-53 revision 3: Recommended Security Controls for Federal Information Systems and Organizations security control catalogue. NIST IR-7622, DRAFT Piloting Supply Chain Risk Management Practices for Federal Information Systems Cloud Security Alliance: Security Guidance for Critical Areas of Focus in Cloud Computing V2.1"

Historical events:

• Network Operators
• Service Providers
• Equipment Suppliers
• Cable
• Internet/Data
• Satellite
• Wireless
• Wireline
• Cyber Security
• Policy
• Training and Awareness
• Intrusion Detection
• CSRIC VII: Rollover New In CSRIC VII