5.21—Managing information security in the ICT supply chain

>Control Description

Control 5.21 - Managing information security in the ICT supply chain. This control is part of the Organizational Controls theme in ISO 27001:2022 Annex A.

>NIST CSF 2.0 Mappings

GV.SC-01 GV.SC-03 GV.SC-09 GV.SC-10

Control mappings sourced from NIST OLIR Catalog (public domain).

>Cross-Framework Mappings

NIST CSF 2.0

SOC 2 TSC

via AICPA TSC mapping structure

CC9.2

Compare

Ask AI

Configure your API key to use AI features.