NIST CSF 2.0 · derived mapping target
GV.SC-02Supplier roles and responsibilities established
Define and coordinate cybersecurity responsibilities for suppliers, customers, and partners so everyone knows their part in keeping the chain secure.
Mapping at a glance
GV.SC-02Supplier roles and responsibilities establishedNIST CSF 2.0
GV.SC-02 is covered by 3 Sekit CSF controls. Open in the full graph →
Mapped from the Sekit CSF
The Sekit controls that cover this requirement, lens by lens.
RCF-0025Third-party risk management · PolicyRCF-0026Third-party risk management · ProcessRCF-0027Third-party risk management · Technical
ISO/IEC 27001:2022 counterparts
Reached through the Sekit CSF controls both map to — a mapping, not a formal equivalence.
ISO/IEC 42001:2023 — Annex A counterparts
Evidence that proves this control
What an auditor, or Sekit's evidence engine, asks for.
Vendor due diligence and monitoring
How the company assesses a supplier's security before hiring and monitors it during the relationship, including the process when it ends.
From the Sekit evidence catalog
Related controls
Via the shared Sekit CSF topic, not the framework's own index.
Ask Sekura: “What evidence proves GV.SC-02?”
Also via MCP, free with account