IR-4 (10)
IR-4 (10) Description
The organization coordinates incident handling activities involving supply chain events with other organizations involved in the supply chain.
Supplemental
Organizations involved in supply chain activities include, for example, system/product developers, integrators, manufacturers, packagers, assemblers, distributors, vendors, and resellers. Supply chain incidents include, for example, compromises/breaches involving information system components, information technology products, development processes or personnel, and distribution processes or warehousing facilities.
CIA Levels | |
---|---|
Confidentiality | unknown |
Integrity | unknown |
Availability | unknown |
Overlays |
---|
Int-A, Int-B, Int-C |