SekitCrosswalk
ENES
Empieza ahora
NIST CSF 2.0 · destino de mapeo derivado

GV.SC-05Supply chain requirements in contracts

Build clear cybersecurity requirements into supplier contracts and agreements, prioritized by risk, so expectations are enforceable rather than assumed.

El mapeo de un vistazo
GV.SC-05Supply chain requirements in contractsNIST CSF 2.0
RCF-0025Third-party risk managementGovernance & Risk · PolíticaRCF-0026Third-party risk managementGovernance & Risk · ProcesoRCF-0027Third-party risk managementGovernance & Risk · TécnicaRCF-0331Shared responsibility modelCloud Security · PolíticaRCF-0332Shared responsibility modelCloud Security · Proceso

GV.SC-05 queda cubierto por 9 controles del Sekit CSF. +4 más en la tabla de abajo. Abrir en el grafo completo →

Mapeado desde el Sekit CSF

Los controles de Sekit que cubren este requisito, lente a lente.

RCF-0025Third-party risk management · PolíticaRCF-0026Third-party risk management · ProcesoRCF-0027Third-party risk management · TécnicaRCF-0331Shared responsibility model · PolíticaRCF-0332Shared responsibility model · ProcesoRCF-0333Shared responsibility model · TécnicaRCF-0370Cross-border transfers · PolíticaRCF-0371Cross-border transfers · ProcesoRCF-0372Cross-border transfers · Técnica

Correspondencias en ISO/IEC 27001:2022

Alcanzadas a través de los controles del Sekit CSF que ambos mapean: un mapeo, no una equivalencia formal.

A.5.34 Privacy and protection of personal identifiable information (PII)A.5.22 Monitoring, review and change management of supplier servicesA.5.14 Information transferA.5.23 Information security for use of cloud servicesA.5.19 Information security in supplier relationshipsA.8.16 Monitoring activitiesA.8.9 Configuration managementA.8.15 LoggingA.8.24 Use of cryptographyA.5.18 Access rightsA.5.21 Managing information security in the ICT supply chainA.5.20 Addressing information security within supplier agreements

Correspondencias en ISO/IEC 42001:2023 — Annex A

A.7.3 Acquisition of dataA.10.2 Allocation of responsibilities

Correspondencias en Cyber Essentials

CE2.1 Remove unnecessary accounts and softwareCE2.2 Change default and guessable passwords

Controles relacionados

Vía el tema compartido del Sekit CSF, no el índice del propio marco.

GV.OC-03 Legal and regulatory requirements understoodGV.OC-04 Critical objectives and services understoodGV.SC-01 Supply chain risk program establishedGV.SC-02 Supplier roles and responsibilities establishedGV.SC-03 Supply chain risk integratedGV.SC-04 Suppliers known and prioritizedGV.SC-06 Due diligence before engagementGV.SC-07 Supplier risk managed over relationship
Pregúntale a Sekura: «¿Qué evidencia demuestra GV.SC-05?»
También vía MCP, gratis con cuenta