NIST 800-53 rev.5/Supply Chain Risk Management/991 of 1011
SR-03 (03)Supply Chain Controls and Processes | Sub-tier Flow Down
Control family: Supply Chain Risk Management
Control description
Ensure that the controls included in the contracts of prime contractors are also included in the contracts of subcontractors.
How to implement
Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.