Detections
Analytics
800-53|IR-6(3)
Title
COORDINATION WITH SUPPLY CHAINDescription
The organization provides security incident information to other organizations involved in the supply chain for information systems or information system components related to the incident.Supplemental
Organizations involved in supply chain activities include, for example, system/product developers, integrators, manufacturers, packagers, assemblers, distributors, vendors, and resellers. Supply chain incidents include, for example, compromises/breaches involving information system components, information technology products, development processes or personnel, and distribution processes or warehousing facilities. Organizations determine the appropriate information to share considering the value gained from support by external organizations with the potential for harm due to sensitive information being released to outside organizations of perhaps questionable trustworthiness.Reference Item Details
Reference: NIST 800-53 - Security and Privacy Controls for Federal Information Systems and Organizations
Category: INCIDENT RESPONSE
Parent Title: INCIDENT REPORTING
Family: INCIDENT RESPONSE
Audit Items
View all Reference Audit Items