Technical tools automatically map and monitor service dependencies and their security status
Monitoring tooling that watches uptime, certificate and domain expiry and provider status feeds supports A.5.22's ongoing visibility over supplier services, though it does not by itself perform the security review or change management the control requires.
This technical control monitors availability and security posture of critical external services, keeping the service inventory A.5.9 requires connected to live status.
Monitoring the availability and security posture of critical external services, including uptime and certificate expiry, is a direct instance of the monitoring A.8.16 requires.