NIST 800-53 rev.5/Supply Chain Risk Management/1001 of 1011
SR-06 (01)Supplier Assessments and Reviews | Testing and Analysis
Control family: Supply Chain Risk Management
Control description
Employ [Selection (one or more): organizational analysis; independent third-party analysis; organizational testing; independent third-party testing] of the following supply chain elements, processes, and actors associated with the system, system component, or system service: [Assignment: organization-defined supply chain elements, processes, and actors].
How to implement
Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.