Under active development Content is continuously updated and improved

5.1.65.1.6

>Control Description

The relevant entities shall review the supply chain security policy, and monitor, evaluate and, where necessary, act upon changes in the cybersecurity practices of suppliers and service providers, at planned intervals and when significant changes to operations or risks or significant incidents related to the provision of ICT services or having impact on the security of the ICT products from suppliers and service providers occur.

Ask AI

Configure your API key to use AI features.