ISO/IEC 27001:2022/Organizational controls/51 of 123
A.5.21Managing information security in the information and communication technology (ICT) supply chain
Control family: Organizational controls
Control description
Processes and procedures shall be defined and implemented to manage the information security risks associated with the ICT products and services supply chain
How to implement
Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.