GV.SC.S5—GV.SC.S5
>Control Description
SBOM shall be obtained for all new software procurements of core and critical activities and kept updated with every upgrade or change. In case the SBOM cannot be obtained for the legacy or proprietary systems, the Board/ Partners/ Proprietor of the organization shall approve the same with proper limitation, rationale, and risk management approach
>Cross-Framework Mappings
Ask AI
Configure your API key to use AI features.