Supply chain continuity risks are consistently reviewed and alternative supplier arrangements are maintained
Reviewing critical supplier continuity risk on a schedule, with a workable fallback in place, keeps A.5.19's supplier risk assessment from being a one-time exercise.
Keeping a workable fallback for suppliers the business cannot operate without addresses the continuity dimension of the ICT supply chain risk A.5.21 targets.
Reviewing critical supplier continuity risk on a schedule is the periodic-review half of A.5.22, applied to whether a supplier can still deliver.