NIST 800-53 rev.5/Supply Chain Risk Management/1000 of 1011
SR-06Supplier Assessments and Reviews
Control family: Supply Chain Risk Management
Control description
Assess and review the supply chain-related risks associated with suppliers or contractors and the system, system component, or system service they provide [Assignment: organization-defined frequency].
How to implement
Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.