SA-12(12)—Supply Chain Protection
Management
>Control Description
SUPPLY CHAIN PROTECTION | INTER-ORGANIZATIONAL AGREEMENTS The organization establishes inter-organizational agreements and procedures with entities involved in the supply chain for the information system, system component, or information system service.
>Supplemental Guidance
The establishment of inter-organizational agreements and procedures provides for notification of supply chain compromises. Early notification of supply chain compromises that can potentially adversely affect or have adversely affected organizational information systems, including critical system components, is essential for organizations to provide appropriate responses to such incidents.
Ask AI
Configure your API key to use AI features.