Listen "GV.SC-10 - Planning for Post-Partnership Security"
Episode Synopsis
GV.SC-10 ensures that supply chain risk management plans address post-relationship activities, such as terminating supplier access or managing data disposal. This involves establishing processes for secure transitions, including end-of-life maintenance and asset recovery, to prevent residual risks. It safeguards the organization after partnerships end.This subcategory mitigates risks like data leakage or system vulnerabilities by verifying that supplier obligations are fulfilled at termination. It promotes resilience by planning for both normal and adverse exits, ensuring continuity and security. GV.SC-10 closes the loop on supply chain risk management.
More episodes of the podcast Framework: The NIST Cybersecurity Framework (CSF)
Introduction to the NIST CSF
23/02/2025
Introduction to Gap Assessments
23/02/2025
The Fundamentals of Cybersecurity Controls
23/02/2025
Cybersecurity Maturity
23/02/2025
Cybersecurity Risk Management
23/02/2025
Introduction to NIST 800-53
23/02/2025
Introduction to NIST CSF Profiles
23/02/2025
ZARZA We are Zarza, the prestigious firm behind major projects in information technology.