Compliancemanzill.com
NIST 800-53 rev.5

NIST 800-53 rev.5/Program Management/575 of 1011

PM-30Supply Chain Risk Management Strategy

Control family: Program Management

Control description

a. Develop an organization-wide strategy for managing supply chain risks associated with the development, acquisition, maintenance, and disposal of systems, system components, and system services;

1. Implement the supply chain risk management strategy consistently across the organization; and

(a) Review and update the supply chain risk management strategy on [Assignment: organization-defined frequency] or as required, to address organizational changes.

How to implement

Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.