5.22—Monitoring, review and change management of supplier services

>Control Description

Control 5.22 - Monitoring, review and change management of supplier services. This control is part of the Organizational Controls theme in ISO 27001:2022 Annex A.

>NIST CSF 2.0 Mappings

DE.CM-06 GV.SC-01 GV.SC-04 GV.SC-09 GV.SC-10 ID.AM-04 ID.AM-08 ID.RA-02 ID.RA-03 ID.RA-09 ID.RA-10

Control mappings sourced from NIST OLIR Catalog (public domain).

>Cross-Framework Mappings

NIST CSF 2.0

SOC 2 TSC

via AICPA TSC mapping structure

CC9.2

Compare

Ask AI

Configure your API key to use AI features.