Supply Chain Security
What is Supply Chain Security?
Measures to protect the integrity of products and information throughout the supply chain from manufacturing through delivery to end users.
Terms that appear alongside supply chain security
Each of these is named in at least one of the same controls as supply chain security. The number is how many controls name both.
- cybersecurity 15 shared controls
- nist 10 shared controls
- compliance 7 shared controls
- vulnerability 6 shared controls
- audit 6 shared controls
- risk assessment 5 shared controls
- resilience 5 shared controls
- incident response 5 shared controls
Frameworks that govern supply chain security
What the standards actually require on supply chain security
Requirements naming supply chain security across 6 standards, quoted from the control text.
The organization shall put a management system in place so that its own supply chain security processes can be carried out.
iso-28001-2007-supply-chain-security-management::5.5 · 5.5 Execution of the supply chain security plan →The State establishes a supply chain security process that includes approving regulated agents and/or known consignors where they implement screening or other controls on cargo and mail.
icao-annex-17-aviation-security-avsec::4.6.2 · 4.6.2 Supply chain security process →Maintain inventory of open source and third party components in code using Software Composition Analysis tools.
DS-2 · Ensure software supply chain security →Manage vendor and supply-chain security for ICS components, including integrator and maintenance-provider security, third-party access, and provenance of hardware/software/patches.
CISA-ICS-DID-28 · Vendor Management and Supply Chain Security →The asset owner shall address security in its supply chain: requirements placed on service providers and product suppliers (referencing 2-4 and 4-1), and the assessment of what they deliver.
iec-62443::ORG 1.6 · Supply chain security →Set policies on software and hardware supply chain security for the systems and assets identified as critical.
imo-maritime-cybersecurity-guidelines-msc-fal-1-circ-3-rev-4::3.5.3.8 · 3.5.3.8 Supply chain security policy for critical systems →Questions people ask about supply chain security
What is Supply Chain Security?
Why is Supply Chain Security important for compliance?
Which compliance frameworks address Supply Chain Security?
Where can I learn more about Supply Chain Security?
See how Supply Chain Security applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.