NIST CSF 2.0 · derived mapping target
ID.AM-04Supplier service inventory maintained
Keep a record of the services your suppliers provide to you, so you know which external dependencies sit inside your operations.
Mapping at a glance
ID.AM-04Supplier service inventory maintainedNIST CSF 2.0
ID.AM-04 is covered by 3 Sekit CSF controls. Open in the full graph →
Mapped from the Sekit CSF
The Sekit controls that cover this requirement, lens by lens.
RCF-0052Criticality tagging · PolicyRCF-0053Criticality tagging · ProcessRCF-0054Criticality tagging · Technical
ISO/IEC 27001:2022 · Annex A controls counterparts
Reached through the Sekit CSF controls both map to — a mapping, not a formal equivalence.
Evidence that proves this control
What an auditor, or Sekit's evidence engine, asks for.
Software and SaaS inventory
The list of installed software and cloud apps the company uses, with their licences, and a sense of which tools people use that are not officially approved.
Vendor due diligence and monitoring
How the company assesses a supplier's security before hiring and monitors it during the relationship, including the process when it ends.
From the Sekit evidence catalog
Related controls
Via the shared Sekit CSF topic, not the framework's own index.
Ask Sekura: “What evidence proves ID.AM-04?”
Connect your AI · free MCP
https://sekit.ai/api/mcp/crosswalk- In Claude or ChatGPT, add a custom connector and paste this URL.
- Sign in with your email to finish. Free, read-only, no organization required.