Under active development Content is continuously updated and improved

SR-3(1)Diverse Supply Base

>Control Description

Enterprises should diversify their supply base, especially for critical ICT/OT products and services. As a part of this exercise, the enterprise should attempt to identify single points of failure and risk among primes and lower-level entities in the supply chain. See Section 2, Appendix C, and RA-9 for guidance on conducting criticality analysis.

>Cross-Framework Mappings

Ask AI

Configure your API key to use AI features.