GV.SC-03 — Integrate C-SCRM with Risk Management | Defense Map
Cybersecurity supply chain risk management is integrated into cybersecurity and enterprise risk management, risk assessment, and improvement processes
Search & Discovery 2.0
Find the exact control, technique, lesson, or book.
Search the complete Bare Metal Cyber knowledge system with identifier-aware ranking, framework filters, topic discovery, and direct paths into books, podcasts, and Academy learning.
11,003searchable records
6,025Academy lessons
6framework families
144published books
Search results
31 results for “cybersecurity”
GV.SC-05 — Supply Chain Requirements in Agreements | Defense Map
Requirements to address cybersecurity risks in supply chains are established, prioritized, and integrated into contracts and other types of agreements with suppliers and other relevant third parties
GV.SC-09 — Life-Cycle Supply Chain Security | Defense Map
Supply chain security practices are integrated into cybersecurity and enterprise risk management programs, and their performance is monitored throughout the technology product and service life cycle
GV.SC-10 — Post-Relationship Supply Chain Provisions | Defense Map
Cybersecurity supply chain risk management plans include provisions for activities that occur after the conclusion of a partnership or service agreement
PR.AT-02 — Specialized Role Training | Defense Map
Individuals in specialized roles are provided with awareness and training so that they possess the knowledge and skills to perform relevant tasks with cybersecurity risks in mind
RC.RP-04 — Establish Post-Incident Operational Norms | Defense Map
Critical mission functions and cybersecurity risk management are considered to establish post-incident operational norms
SI-5 — Security Alerts, Advisories, and Directives | Defense Map
The Cybersecurity and Infrastructure Security Agency (CISA) generates security alerts and advisories to maintain situational awareness throughout the Federal Government. Security directives are issued by OMB or other designated organizations with the responsibility and authority to issue such directives. Compliance with security directives is essential due to the critical nature of many of these directives and the…